Business Email Compromise (BEC)
Business email compromise (BEC) is a fraud in which criminals take over or impersonate a trusted email account to trick someone into sending money or sensitive information. In commercial real estate, attackers often pose as a borrower, title company or lender to change wire instructions for closings, payoffs or draws.
Why business email compromise matters in CRE
Commercial real estate moves large sums by wire, often under deadline pressure, and many parties communicate by email. That combination makes closings, loan payoffs and construction draws common targets.
The warning signs are consistent: last-minute changes to wire instructions, unexplained urgency, a slightly altered email address, and a refusal to confirm by phone. The FBI's Internet Crime Complaint Center collects reports of BEC and urges victims to contact their bank immediately to request a recall of funds.
Prevention depends on process. Confirming payment instructions through a known phone number, moving document exchange off email, and flagging any change in bank details stop many attempts before money moves.
Business Email Compromise vs. Phishing
Phishing casts a wide net with generic messages to steal passwords or install malware. Business email compromise is targeted: attackers study a specific deal or relationship and send a convincing, well-timed request for a payment or document change.
How Smart Capital Center helps reduce BEC risk
Smart Capital Center's AI agents compare incoming documents and payment details with prior records and flag changes, such as new bank account details, for the team to verify. Its borrower portal also moves document exchange off email and into an authenticated system.
Frequently asked questions
How does business email compromise happen in real estate transactions?
Attackers gain access to or imitate an email account belonging to someone in the deal, such as a borrower, broker, title agent or lender. They watch the conversation, then send a message at a key moment asking for funds to go to a new account. The request looks legitimate because it fits the deal's timeline.
How can lenders prevent BEC fraud?
Effective steps include verifying any change in payment instructions by phone using a number already on file, requiring two-person approval for wires, moving document and instruction exchange into a secure portal, training staff on warning signs, and using tools that flag changed bank details.
What should you do if you suspect a BEC scam?
Contact your bank immediately to request a recall of the funds, notify the other parties in the transaction through phone numbers you already have, and file a complaint with the FBI's Internet Crime Complaint Center. Acting quickly gives the best chance of recovering the money.