skip to main content
Travelers Logo
  • About
  • Careers
  • Agents
  • Investors
  • Sustainability
  • Contact Us

Register now
Problems logging in?
  • For Individuals
    • Overview
    • Products
      • Car
      • Home
      • Renters
      • Condo
      • Landlord
      • Boat & Yacht
      • Travel
      • Pet
      • Weddings
      • Umbrella
      • All Products
    • Prepare & Prevent
      • Insurance 101
      • Home Central
      • Travelers Garage
      • Managing Through COVID-19
    • Affinity Group Discount
    • Online Service
    • Pay Your Bill
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • For Business
    • Overview
    • Products & Solutions
      • Overview
      • Boiler & Machinery
      • Commercial Auto & Trucking
      • Cyber
      • Environmental Liability
      • Excess Casualty & Umbrella
      • General Liability
      • Global Insurance
      • Inland Marine
      • Management & Professional Liability
      • National Programs
      • Ocean Marine
      • Property
      • Small Business Owner's Policy
      • Surety Bonds
      • Workers Compensation
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Industries
      • Overview
      • Agribusiness
      • Architects, Engineers & Surveyors
      • Auto & Truck Dealers
      • Business & Professional Services
      • Construction
      • Education
      • Energy & Renewable
      • Equipment Dealers
      • Financial Institutions
      • Food Services
      • Health & Related Services
      • Hospitality & Recreation
      • Manufacturing
      • Marine Industries
      • Museums & Fine Art
      • Non-Profit
      • Oil & Gas
      • Public Entities
      • Real Estate
      • Retail
      • Technology
      • Transportation
      • Wholesale & Distribution
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Services
      • Overview
      • Risk Control
      • Claim
      • Premium Audit
      • Online Customer Tools
      • Risk Management Information Services
      • Travelers Client Advantage
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Small Business
      • Overview
      • Automobile Insurance
      • Business Owner's Policy
      • Data Breach
      • Employment Practices Liability
      • Professional Insurance
      • Umbrella Insurance
      • Workers Compensation Inurance
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Large Business
      • Overview
      • Casualty
      • Cyber
      • Management & Professional Liability
      • Property
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Multinational Business
    • Prepare & Prevent
      • By Topic
      • By Industry
      • Navigating Your Business Through COVID-19
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • Claim Center
    • Claim Center
    • Should I File a Claim?
    • Report a Claim
    • Roadside Assistance
    • Find a Service Provider
    • Check Your Claim Status
    • Manage Your Claim Experience
      • Claim Reporting Next Steps
      • Claim Guide Library
      • Workers Compensation Resources
    • Claim Capabilities
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • Prepare & Prevent
    • For Individuals
    • Home Central
      • Buying & Selling
      • Home Maintenance
      • Home Renovation
      • Home Safety
      • Moving
      • Smart Home
    • Travelers Garage
      • Buying & Selling
      • Car Maintenance
      • Distracted Driving
      • Safe Driving
      • Teen Driving
      • Boating
    • Insurance 101
    • Weather
    • For Business
    • Industries
      • Construction
      • Manufacturing
      • Nonprofit
      • Small Business
      • Technology
    • Topics
      • Business Continuity
      • Cyber
      • Driver and Fleet Safety
      • Facilities Management
      • Internet of Things
      • Product and Services Liability
      • Supply Chain Management
      • Workplace Safety
    • Travelers Risk Index
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • About Travelers
    • Overview
      • Awards & Recognition
      • Careers
      • Community
      • Diversity & Inclusion
      • Sustainability
      • History
      • Investors
      • Media Resources
      • News
      • Travelers Championship
      • Travelers Institute
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
    • Get a Quote
    • Find an Agent
    • Report a Claim
    • Pay Your Bill
Main Navigation
  • For Individuals
      • Insurance for Individuals
      • Products
        • Car
        • Home
        • Renters
        • Condo
        • Landlord
        • Boat & Yacht
        • Travel
        • Pet
        • Weddings & Events
        • Umbrella
        • More
      • Prepare & Prevent
        • Insurance 101
        • Home Central
        • Travelers Garage
      • Affinity Group Discount
      • Online Service
      • Pay Your Bill
    • Get a home quote now

      It's easy to get a free quote for home insurance from Travelers in just a few minutes.

       

      Get a home quote now
  • For Business
      • Products & Solutions
        • Commercial Auto & Trucking
        • Cyber
        • General Liability
        • Management & Professional Liability
        • Property
        • Small Business Owner's Policy
        • Surety Bonds
        • Workers Compensation
        • More
      • Industries
        • Construction
        • Energy & Renewable
        • Financial Institutions
        • Healthcare
        • Manufacturing
        • Real Estate
        • Technology
        • Transportation
        • More
      • Prepare & Prevent
      • Services
        • Risk Control
        • Claim
        • Premium Audit
        • More
      • Pay Your Bill
      • Small Business
      • Large Business
      • Multinational Business
      • For Business Overview
    • Tips for Managing Risks Related to a Remote Workforce

      Tips for Managing Risks Related to a Remote Workforce

      With the current reality of more employees working from home through the pandemic, is your business ready for all the implications?

      Learn more
  • Claim Center
      • Claim Center
      • Should I File a Claim?
      • Report a Claim
      • Roadside Assistance
      • Find a Service Provider
      • Check Your Claim Status
      • Manage Your Claim Experience
        • Claim Reporting Next Steps
        • Claim Guide Library
        • Workers Compensation Resources
      • Claim Capabilities
    • Send us your receipts, photos, invoices and more with just a push of a button.

      Securely share information with your Claim team.

      Send us your receipts, photos, invoices and more with just a push of a button.

      Upload a File
  • Prepare & Prevent
      • For Individuals
      • Home Central
        • Buying & Selling
        • Home Maintenance
        • Home Renovation
        • Home Safety
        • Moving
        • Smart Home
      • Travelers Garage
        • Buying & Selling
        • Car Maintenance
        • Distracted Driving
        • Safe Driving
        • Teen Driving
        • Boating
      • Insurance 101
      • Weather
      • For Business
      • Industries
        • Construction
        • Energy
        • Manufacturing
        • Nonprofit
        • Small Business
        • Technology
      • Topics
        • Business Continuity
        • Cyber
        • Driver and Fleet Safety
        • Facilities Management
        • Internet of Things
        • Product and Services Liability
        • Supply Chain Management
        • Workplace Safety
      • Travelers Risk Index
    • Managing Through COVID-19

      Managing Through COVID-19

      Resources to help you adapt to the realities of COVID-19.

      Learn more
  • Home
  • Prepare & Prevent
  • Business
  • Cyber
  • How to Protect Your Company from Business Email Hacks [Video]

How to Protect Your Company from Business Email Hacks [Video]

One mistaken click can be costly if a hacker gains access to your business email account and uses that access to defraud your business of thousands – or even millions – of dollars. Watch Ken Morrison, a Travelers cybersecurity professional, show how an attack like this works, so you can recognize the signs and take steps to protect your business from cyber criminals.

Business email hacking is a serious risk to businesses of all sizes and industries. Known as a business email compromise, or BEC, it is a type of social engineering fraud that involves a hacker gaining access to an employee’s business email account. Posing as the employee, the hacker tricks others into executing fraudulent wire transfers, gift card purchases or other financial transactions.

Often, business email compromise hacks involve the perpetrator impersonating the company’s chief executive officer or other high-ranking employee. This tactic serves to intimidate the lower-ranking employee who receives an email from the executive directing the employee to make a time-sensitive wire transfer of funds. Often, the instructions say the matter is urgent and it will include business-specific information, such as the fact that the executive is traveling overseas or attending an important event in another country, so as to appear credible and dupe the recipient into acting on what seems to be a business-critical request. Business email compromise can also involve impersonating, or spoofing, the email account of a trusted partner, such as a vendor or contractor.

For businesses and the financial institutions that serve them, business email compromise is a growing cyber risk, with nearly $9 billion in attempted thefts reported since 2016.1 Companies with publicly available information about their business transactions and processes can become attractive targets to hackers who use such information in their schemes.

“A business email compromise can threaten the survival of a business,” said Ken Morrison, a Travelers Risk Control cybersecurity professional, who recently demonstrated how a business email attack works. The most important factor in determining whether a company recovers funds is how quickly the fraud is discovered, Morrison said. Sometimes it’s possible to stop payment before money mules withdraw funds for these cyber thieves. Insurance coverage for social engineering fraud can also help protect companies from this type of scam.

“It’s not just the funds stolen in a fraudulent wire transfer or other transaction that can be a loss to a business – it’s the potential for a data breach as a result of the compromise,” Morrison said, adding that there could be expensive regulatory implications and reporting requirements for the business, as well as potential damage to a company’s brand and reputation.

Business Email Compromises Target Vulnerable Business Practices

In 2019, the FBI said that the total losses resulting from business email hacks reported in 2018 had nearly doubled year-over-year, to near $1.3 billion.2 The U.S. government is targeting scammers, and a recent crackdown effort between the U.S. Department of Justice, U.S. Department of Homeland Security, U.S. Postal Inspection Service and several other agencies resulted in the seizure of nearly $3.7 million.3

“Understanding how business email compromise schemes work can help companies reduce their susceptibility to business email fraud,” Morrison said. Companies can also report business email compromise attempts to IC3.gov, the Internet Crime Complaint Center, so authorities can recognize trends and target the growing number of cyber thieves.

Companies can help protect their operations against the threat of compromised emails. For example, avoid sharing information about business processes online, which can be used in a scam. Scammers conduct reconnaissance on targets, often through social media, to develop spear-phishing schemes and create credible demands for payment, often by impersonating a critical player in a business.

In a business email compromise, a hacker could gain access to an employee’s email account through a spear-phishing attempt, in which the employee clicks on a link in an email that appears to be legitimate. Once the employee clicks on the link, their business email account is compromised. The hacker then poses as that employee and requests an urgent wire transfer. However, if the company has strict authorization and authentication protocols in place, such as an automatic prompt that requires the employee to make a phone call to verify changed wire transfer instructions, scams like these can be thwarted before causing actual damage.

Ways to Prevent Business Email Compromise

To mitigate risks and make themselves less-attractive targets, companies can assess their business processes and establish email security best practices and protocols. Steps might include creating a cybersecurity awareness and training program that includes instructions on how to recognize social engineering-based attacks like phishing and other business email targeted scams. Because business email compromise trends and techniques evolve, it’s important to regularly update your training programs and have employees participate in refresher classes.

Implement other cybersecurity enhancements such as:

  • Multifactor authentication for cloud-based email and remote access.
  • Dual authorization policies for financial transactions.
  • Social media policies and best practices that include the latest security protocols.

Protection Pre-Breach, Post-Breach and Always

Cyber insurance can also help protect your company from cyber thieves – pre-breach, post-breach and always – especially when it includes services like training and assessments of your company’s technology risks. Cyber insurance from Travelers can also cover forensic investigations, litigation expenses associated with a data breach, regulatory defense expenses/fines, crisis management expenses, business interruption losses, cyber extortion and more.

In addition to coverage, Travelers provides pre-breach and post-breach risk management services for policyholders at no additional cost. These include access to pre-breach services provided by Symantec™, a global leader in cybersecurity solutions, and access to Travelers’ eRisk Hub®,* an information portal of risk management tools powered by NetDiligence®.

Learn more about cyber risk insurance or talk to an agent to discuss how cyber insurance can help protect your business.


* eRisk Hub is a registered trademark of NetDiligence.

Sources

1 U.S. Treasury Financial Crimes Enforcement Network: Updated Advisory on Email Compromise Fraud Schemes Targeting Vulnerable Business Practices, July 16, 2019.
2 https://www.justice.gov/opa/pr/281-arrested-worldwide-coordinated-international-enforcement-operation-targeting-hundreds
3 https://www.justice.gov/opa/pr/281-arrested-worldwide-coordinated-international-enforcement-operation-targeting-hundreds

Learn More About Travelers Cyber Insurance Options
cyber risks and your business

Cyber Risks and Your Business [Video]

Take a look inside how a data breach can affect a business, and what a business can do to help protect against cyber risks in this video.

Cyber test

Cyber Risk Pressure Test [Tool]

What could your company be doing to better manage cyber risk? Take our four-part questionnaire to find out.

virus downloaded on mobile phone

5 New Cyber Threats: Prepare to Defend Your Business

Digital security threats continue to come from new and surprising sources. Here are five trends that Travelers is watching.

Top Stories
2019 Travelers Risk Index: Cyber [Infographic]

2019 Travelers Risk Index: Cyber [Infographic]

Cyber risk is now the top business concern across businesses of all sizes. See the results.


Related Content

  • Cyber Security Training for Employees
  • How Pre-Breach Planning Can Help Protect Your Company
  • How Does Cyber Insurance Work?

Find an Agent

Need an Agent?

Get the personal service and attention that an agent provides.

Find a local agent in your area:


Related Products & Services

Travelers Pre-Breach Services provided by Symantec™

Better together when it comes to cyber protection.


CyberRisk for Multiple Industries and Business Sizes

Broad cyber liability coverage customized to fit the needs of small businesses to Fortune 500 companies and every organization in between.


See All Cyber Content


Travelers logo

Travelers and The Travelers Umbrella are registered trademarks of The Travelers Indemnity Company in the U.S. and other countries.
© 2021 The Travelers Indemnity Company. All rights reserved.

  • Travelers on Facebook
  • Travelers on YouTube
  • Travelers on Twitter
  • Travelers on LinkedIn
  • Travelers on Instagram

Products & Services

  • For Individuals
  • For Businesses
  • Claim Services
  • Prepare & Prevent

Our Company

  • About Travelers
  • Careers
  • Investors
  • Sustainability

Connect

  • Customer Support
  • MyTravelers®
  • For Agents
  • Find an Agent

Legal & Compliance

  • Terms of Service
  • Privacy & Security
  • Accessibility
  • Producer Compensation Disclosure