BEC network destroyed, causing €140 million in damages

International blow against cybercrime: Multi-million dollar fraud via Business Email Compromise thwarted

Law enforcement agencies in Spain, Portugal, and Panama have uncovered and dismantled an international network of fraudsters specializing in business email compromise (BEC). The perpetrators intercepted business email communications between companies, manipulated payment instructions, and redirected transactions to accounts they controlled. The total damage is estimated at approximately €140 million.

Business email fraud (BEC) is considered one of the most financially damaging forms of cybercrime worldwide. The dismantled network operated with a high degree of technical sophistication: perpetrators gained access to business email accounts, analyzed ongoing transactions, and chose the right moment to inject fraudulent payment instructions. They meticulously imitated the communication style of known business partners, ensuring that employees remained unaware of the manipulations.

The group's network spanning three continents – Europe and Latin America – illustrates how transnationally organized cybercrime is structured today. Money laundering was carried out through a network of shell companies and private accounts in several countries, which significantly hampered tracing. Only through intensive cooperation between national authorities and Europol were the main perpetrators identified and arrested.

Weaknesses in corporate security

• Insufficient email authentication (SPF, DKIM, DMARC)
• Lack of two-factor verification for payment authorizations
• Lack of employee training in the recognition of social engineering
• No established recall process for changes to bank account details
• Inadequate monitoring of email forwarding rules