{
  "slug": "bec-supplier-bank-change",
  "canonical_name": "Supplier \"updated bank details\" (invoice redirect)",
  "family": "bec-invoice-redirect",
  "impersonates": {
    "brand": "a supplier or executive of your own company",
    "disclaimer": null,
    "official_fraud_page": null
  },
  "goal": [
    "payment"
  ],
  "channels": [
    "email"
  ],
  "summary": "For businesses: an email from a known supplier — or from a look-alike address — announcing new bank details for the next payment. The next invoice is paid to the criminals. FBI IC3 tracks this as business email compromise, the costliest category it records.",
  "status": "active",
  "first_seen": null,
  "last_seen": null,
  "recognise": [
    "Bank-detail changes by email, often just before a large payment",
    "A look-alike domain, one letter off",
    "Pressure to skip the usual verification"
  ],
  "variants": [],
  "specimen": null,
  "tells": [],
  "indicators": {
    "sender_domains": [],
    "senders": [],
    "reply_to": [],
    "phone_numbers": [],
    "urls": [],
    "wallets": [],
    "attachments": [],
    "note": "Indicators change weekly; an empty list never means an email is safe."
  },
  "what_to_do": {
    "if_received": [
      "Verify any bank change by phone on a number you already had, never from the email",
      "Check the sender domain character by character"
    ],
    "if_called_or_paid": [
      "Call your bank immediately and ask for a recall; speed matters in the first hours",
      "Report to IC3 with the payment details"
    ],
    "report_links": [
      {
        "label": "Report to FBI IC3",
        "url": "https://www.ic3.gov/"
      }
    ]
  },
  "malware_family": null,
  "timeline": [
    {
      "date": "2026-09-02",
      "type": "registry",
      "title": "Family created",
      "text": "Opened at launch; no dated specimen on record yet — send yours.",
      "added": [],
      "removed": [],
      "sources": []
    }
  ],
  "related": [
    "docusign-document-waiting"
  ],
  "sources": [
    "https://www.ic3.gov/"
  ],
  "legacy_urls": [],
  "legacy_redirect": false,
  "created": "2026-09-02",
  "updated": "2026-09-02",
  "changelog": [
    {
      "date": "2026-09-02",
      "text": "Record created at the registry launch."
    }
  ],
  "url": "https://soft2secure.com/scams/bec-supplier-bank-change",
  "licence": "CC BY 4.0",
  "generated": "2026-09-03"
}