Scam Library
Business Email Compromise
Attackers impersonate executives or suppliers by email to redirect invoice payments or request urgent transfers.
How it works
- A supplier's 'new bank details' arrive by email.
- Or a 'CEO' requests an urgent confidential transfer.
- Finance pays the fraudulent account.
Warning signs
- Changed bank details by email
- Urgency and secrecy
- Lookalike domains
- Unusual sender behaviour
Scenario
Illustrative example: A finance officer receives an email from a lookalike supplier domain asking to pay this month's invoice into a new account.
This scenario is fictional and for illustration only.
How to protect yourself
- Verify bank detail changes by phone
- Use dual approval for payments
- Train staff on lookalike domains
If you've been affected
- Stop all contact with the scammer and do not send any more money or information.
- Contact your bank or mobile money provider immediately to block or reverse transactions where possible.
- Change passwords and PINs for any accounts that may be exposed.
- Keep screenshots, numbers, links and receipts as evidence.
- Report the incident to the Botswana Police Service, and report the number in the ScamProtect app to warn others.