Authored by Adam H. Douglas via The Epoch Times (emphasis ours),
Business email compromise (BEC) is a targeted fraud scheme in which criminals impersonate vendors, executives, or accountants to steal money from businesses. AI has made these attacks dramatically harder to detect by generating personalized emails that mirror real writing styles and existing business relationships.
Criminals are using AI to create highly convincing business email scams that can drain company accounts. Who is Danny/ShutterstockThe FBI reported more than $20 billion in internet crime losses in 2025, with BEC ranked as the second-largest attack method. Small businesses are the primary target.
There are, however, five cost-free verification steps that can significantly reduce your exposure.
What Is Business Email Compromise?A BEC is not your typical phishing email. There is often no suspicious link, no misspelled bank name, and no “lottery prize.”
BECs in 2026 are targeted, researched, and increasingly indistinguishable from a legitimate message sent by someone you already work with.
The Core BEC SchemeA criminal impersonates a trusted contact, such as a vendor, your accountant, or your own CEO, and requests a wire transfer, an invoice payment, or a change to banking details.
By the time you realize something is wrong, the money is gone. Wire transfers are rarely reversible once they leave the domestic banking system.
Why AI Has Made This Significantly WorseFor years, spotting a BEC email meant looking for bad grammar, awkward phrasing, or a sender name that did not quite match the domain. That approach no longer works.
AI tools can now:
The result is correspondence that reads exactly like something your CFO or your longest-standing vendor would write. The old “just read it carefully” advice has been effectively neutralized by tools that generate deception at scale.
What a Typical Attack Looks LikeThese two scenarios play out regularly against small businesses and freelancers:
Scenario 1: The Fake Vendor InvoiceYou receive an email from what appears to be a vendor you have worked with for two years. The address looks right at a glance. The email references your last project together and includes an updated invoice with new banking details. The tone matches the vendor’s usual communication style. You process the payment. The real vendor’s account was never involved.
Scenario 2: The Executive Wire RequestYou get an email from your company’s owner or a senior partner. A deal is closing today, and a wire transfer needs to go out immediately. The request emphasizes urgency and discretion. The writing style matches. The amount fits your normal range. You send it.
Both scenarios have cost small businesses hundreds of thousands of dollars in a single transaction.
Why Small Businesses Are Targeted More Than Large CompaniesLarge enterprises typically have layered payment approval systems, dedicated fraud detection software, and internal cybersecurity teams. Small and mid-sized businesses generally do not.
A single employee may have full authority to execute a wire transfer without a second sign-off. Criminals know this and exploit it systematically.
Five Verification Steps That Cost NothingYou do not need specialized software or a cybersecurity team to reduce your BEC exposure. You need consistent habits.
If your business has already been hit, act immediately. Contact your bank and request a wire recall. File a complaint with the FBI’s Internet Crime Complaint Center at ic3.gov. If the loss is significant, contact your local FBI field office directly.
Also, review your insurance coverage. Standard commercial general liability policies typically do not cover funds transfer fraud. A cyber liability policy or crime insurance endorsement may provide protection.
Talk to a commercial broker about your current coverage before you need to file a claim.
FAQs About Business Email Compromise What Makes BEC Different From a Regular Phishing Scam?Phishing sends the same generic email to thousands of people, hoping someone clicks. BEC is the opposite: it is researched and customized to your specific business. Scammers study your vendor relationships, your internal structure, and your communication patterns before sending a message designed to look like it came from someone you already trust. That targeting makes BEC significantly more dangerous than standard phishing and much harder to catch before money has already moved.
Can My Business Recover Money Lost to a BEC Scam?Recovery is possible but not guaranteed. Wire transfers move quickly, and funds often reach overseas accounts within hours of being sent. Contact your bank the moment you suspect fraud and request a wire recall. File a complaint with the FBI IC3 at ic3.gov. Acting within 24–48 hours gives you the best chance at partial or full recovery. Once funds leave the domestic banking system, getting them back becomes substantially harder and, in many cases, is not possible.
Does My Small Business Need Cyber Liability Insurance to Protect Against BEC?Standard commercial general liability and property policies typically exclude funds transfer fraud. If your business regularly processes wire transfers, receives vendor invoices, or handles client financial data, a cyber liability policy or a crime insurance endorsement is worth reviewing with a commercial broker. Premiums for small businesses can be modest relative to potential losses. Understand exactly what your current policy covers before you need to file a claim, not after.
The Epoch Times copyright © 2026. The views and opinions expressed are those of the authors. They are meant for general informational purposes only and should not be construed or interpreted as a recommendation or solicitation. The Epoch Times does not provide investment, tax, legal, financial planning, estate planning, or any other personal finance advice. The Epoch Times holds no liability for the accuracy or timeliness of the information provided.
Tyler Durden Wed, 05/20/2026 - 18:25In a revelation that blurs the line between calculated covert strategy and sheer desperation, the deep state's latest regime change playbook for Iran has officially leaked via the NY Times; however, there are many aspects to the story which defy belief, and so like many Iran-related things being reported lately, should be taken with a big grain of salt.
According to a fresh New York Times report citing briefed US officials, Washington and Tel Aviv launched "Operations Roaring Lion" and "Epic Fury" with the objective to reinstall none other than former Iranian firebrand Mahmoud Ahmadinejad as the nation's new leader.
via CBCThe very man who had widely been deemed by West as a 'hardliner' was president of the Islamic Republic from 2005 to 2013 with a fiercely anti-Western agenda, and yet was apparently tapped by US intelligence to manage "Iran's political, social, and military situation."
Another publication has correctly called the story and alleged plan "cartoonish" and outlandish-sounding. Indeed just look at how the NY Times report begins: it first recounts how President Trump in the opening days of the war mused publicly that it would be best if "someone from within" Iran took over, and then—
It turns out that the United States and Israel went into the conflict with a particular and very surprising someone in mind: Mahmoud Ahmadinejad, the former Iranian president known for his hard-line, anti-Israel and anti-American views.
But the audacious plan, developed by the Israelis and which Mr. Ahmadinejad had been consulted about, quickly went awry, according to the U.S. officials who were briefed on it.
Mr. Ahmadinejad was injured on the war’s first day by an Israeli strike at his home in Tehran that had been designed to free him from house arrest, the American officials and an associate of Mr. Ahmadinejad said. He survived the strike, they said, but after the near miss he became disillusioned with the regime change plan.
An associate of Ahmadinejad further told the NYT that the Americans viewed him as someone who could actually hold the fractured nation together, despite his well known and colorful anti-Israel statements while he had been in power.
But apparently some of the aspects which made him a candidate, or potential future US-Israeli puppet in Tehran (Delcy Rodriguez-style), was that he had been barred three times from running for president by Iran's unelected 12-member Guardian Council (in 2017, 2021, and 2024). Following his 2017 disqualification, he apparently flipped, becoming a highly vocal critic of Supreme Leader Ali Khamenei.
For this story to be true, it would mean that Ahmadinejad is an Israeli-US asset. It would also mean that his Israeli-US handlers decided to disclose this to the NYT. And it would mean that an Israeli-US bombing of Ahmadinejad’s home, which ended up wounding him, was actually… https://t.co/sfjsQI35z0
— Aaron Maté (@aaronjmate) May 20, 2026Recent reports in the wake of the large-scale January protests, including in The Atlantic, indicated that his freedom of movement had been heavily restricted, and even his phones confiscated. He was by the start of Epic Fury under house arrest.
Because of all of this, a March Atlantic piece had concluded, "For more than a decade, he has been known more as a regime opponent than as a supporter."
The Times report further alleges that blueprint to reinstall the former president was engineered by Israel, who supposedly had been actively discussing the plot with Ahmadinejad himself, but then the plan collapsed after Ahmadinejad was wounded during the chaotic jailbreak attempt - or rather, large-scale airstrike on his home. Since the strike, his actual condition and whereabouts remain entirely unknown.
Ahmadinejad, SERIOUSLY? The Holocaust denier? The wipe Israel off the map guy? The Green Revolution death and torture guy who stole the 2009 elections? The nuclear program accelerator guy? The Islamic fundamentalist end-days guy? https://t.co/xYCUoKjy76
— Christiane Amanpour (@amanpour) May 20, 2026But he has managed to deliver a few public addresses since his alleged escape - including a highly strategic congratulatory message on Mojtaba Khamenei's rise to supreme leader, after his father was killed. So ultimately, little of this NY Times account, which reads like a fantastical spy thriller, sounds too believable.
What the report may have done is simply to paint a bright target on this back: "People close to Mr Ahmadinejad have been accused of having too close ties to the West, or even spying for Israel," the NYT added.
Pundits across the political spectrum have been scratching their heads over the NY Times report:
I wasn’t a fan of Mr. Ahmadinejad during his first term, and my aversion only grew during his second. But why would the New York Times now publish a claim branding him an alleged traitor to his own country? Why would the criminal Trump regime reveal its supposed assets in the… pic.twitter.com/JMEMcnUdph
— Seyed Mohammad Marandi (@s_m_marandi) May 20, 2026The more believable aspect does come when the NYT suggests he Ahmadinejad was top of the list after he personally praised President Trump in a 2019 interview, and argued for a rapprochement between Tehran and Washington.
"Mr Trump is a man of action," Ahmadinejad was quoted as saying. "He is a businessman and therefore he is capable of calculating cost-benefits and making a decision. We say to him, let’s calculate the long-term cost-benefit of our two nations and not be shortsighted."
* * *
Oppositionist lobbies never seem to learn that Washington 'loyalty' doesn't run deep, and is even quite fickle...
Notable development for the Reza Pahlavi crowd and and his “Thank you Bibi” rallies. 👇🏼 https://t.co/wpIVPlbGuM
— Vali Nasr (@vali_nasr) May 20, 2026 Tyler Durden Wed, 05/20/2026 - 18:00