## The CEO Fraud (BEC)

**Business Email Compromise (BEC)** causes more financial loss than Ransomware.

### The Scenario
*   **Target**: The CFO (Finance Director).
*   **Attacker**: Impersonates the CEO.
*   **Email**: "Hi Bob, I am in a meeting. Be discreet. I need you to wire $50k to this vendor immediately. It is for a secret acquisition."

### Indicators
1.  **Urgency**: "Immediately", "Secret", "Before the cutoff".
2.  **Authority**: Leveraging the CEO's title to bypass procedures.
3.  **Spoofing**: Look closely at the email.
    *   `ceo@company-corp.com` (Typosquatting).
    *   `ceo@company.com` (Display Name Spoofing).

### Defense
*   **Process**: "Any wire transfer over $10k requires voice verification."
*   **Tagging**: Add `[EXTERNAL]` tag to email subject lines.