Business Email Compromise
Fraudulent wire transfers initiated through a compromised or impersonated business email account.
Act today, not this week
Business Email Compromise cases are recoverable far more often when they are caught within 48 hours, because the funds are frequently still in an intermediary account and can be recalled. After that window the money is usually spent, converted, or moved beyond the reach of a recall request. If this happened in the last two days, contact us immediately rather than waiting for a scheduled consultation.
Warning signs
These are the patterns we see most often in accepted cases. Recognising one is not proof — but it is a reason to stop and check before sending anything further.
- An urgent payment request that bypasses normal approval process
- A change to supplier bank details communicated only by email
- Email threads where the reply-to address differs from the sender
- Pressure to act before verification can be completed
- A colleague or supplier whose writing style has subtly changed
How we work a bec case
The route depends on where the money is now. This is the sequence we work through.
Same-day recall
Escalate to the beneficiary bank
Involve law enforcement
Recoveries in this category
The same six stages, whichever category you are in
The forensic work differs by fraud type. The process you experience does not.
Intake & Assessment
We review your documentation, confirm the fraud typology, and estimate whether the funds are still traceable. You receive a written assessment, not a sales call.
Forensic Trace
We follow the money. Bank-to-bank transfers, payment processor records, and where applicable on-chain analysis of cryptocurrency movements.
Recovery Strategy
Based on the trace, we select the route most likely to succeed: institution-led recall, negotiated return, civil claim, or a combination. You approve the strategy before we proceed.
Execution
Freezing requests, formal demands, engagement of local counsel, and where necessary legal proceedings. You receive progress updates on a fixed schedule throughout.
Recovery & Return
Recovered funds are returned through secure, documented channels. You receive a full accounting of what was recovered and what was not.
Protection & Follow-up
We advise on account security, credit monitoring, and the specific controls that would have stopped the original fraud.
Find out whether your case is recoverable
Within one week of receiving your documents, you get a written answer either way, with no obligation to proceed.