Criminals are using BEC scams against small businesses to steal hundred-thousand-dollar food shipments.
They are spoofing emails and domains to impersonate employees at real firms, according to a joint Cybersecurity Advisory (CSA) issued Thursday (Dec. 15) by the Federal Bureau of Investigation (FBI), the Food and Drug Administration Office of Criminal Investigations (FDA OCI) and the U.S. Department of Agriculture (USDA).
Having done so, the criminals then order shipments of food products, don’t pay for them, repackage them for individual sale and sell them, according to the CSA.
In examples of recent BEC scams, criminals placed orders using email addresses and websites that closely mimicked legitimate ones, with only an extra letter, a substitute character or a different top-level domain distinguishing them from those of a legitimate company — differences that can easily be overlooked by a supplier’s staff.
Across industries, BEC schemes cost American businesses nearly $2.4 billion and resulted in 19,954 complaints to FBI’s Internet Crime Complaint Center (IC3) in 2021, according to the most recent FBI Internet Crime Report.
As PYMNTS reported at the time of the report’s release, Americans’ losses to internet crime totaled a record $6.9 billion in 2021, which was 7% higher than the year before.
Together with BEC, these crimes include SIM swaps, employment schemes, tech support fakes, auction fraud and romance scams.
The FBI report…
