Which description best defines Business Email Compromise?

Study for the Certified Bank Secrecy Act Professional Test. Use flashcards and multiple-choice questions with hints and explanations. Get exam ready!

Business Email Compromise is a fraud that exploits trusted email channels within a business to get employees to take actions that benefit the attacker. The best description is that it targets organizations, because the attacker’s aim is to interfere with business processes—often by compromising a legitimate email account or impersonating a trusted executive—to cause a wire transfer or the disclosure of sensitive data. This isn’t about general phishing, voice calls, or technical email features; it relies on social engineering and the trust placed in familiar business emails to manipulate financial or data transactions. Typical scenarios involve urgent requests from a high-level executive or a compromised account, asking the finance team to transfer funds or change payment details, exploiting routine procedures rather than exploiting technical flaws in email systems.