Identify BEC and report phishing by following the warnings on your email account first and foremost. Moreover, you can identify a phishing attack by verifying the identity of the sender, double checking their payment credentials against financial databases and never giving away company credit card information or financial data online.