If you can't view this email or any of the images properly, please click here

Beware of Business Email Compromise (BEC) Scams

BEC is a cybercrime where fraudsters target your company, aiming to defraud, steal money, or divulge sensitive information. They gain access to a business email account whilst impersonating someone you know. Stay vigilant to prevent financial losses.

How to spot a Business Email Compromise Scam

BEC scams can be difficult to detect as they are designed to look like legitimate business emails. However, there are some warning signs that recipients can look out for, such as:

A sense of urgency to make payment before the release of goods.

Suspicious links or attachments in the email.

Impersonation of authority figures, such as the CEO, Human Resources, or governmental organisations such as the Royal Malaysia Police (PDRM), Lembaga Hasil Dalam Negeri (LHDN) or Bank Negara Malaysia.

A change in the usual payment account number or bank.

What you should do to keep your business safe

Verify the authenticity of the email sender and payment account

•	Always check the email address and the display name of the sender; BEC scammers often use fake or spoofed email addresses that look similar to the real ones.
•	When in doubt, verify the recipient's account details using the Semak Mule Application (a public police database) before performing a fund transfer.

Implement security controls

Prevent unauthorised access to the company's systems and data by using anti-spam and anti-phishing software to block malicious emails.

Create security awareness among your employees

Educate employees on the dangers of BEC and urge them to report any suspicious emails immediately with a clear reporting process.

For more safe banking tips, please visit OCBC Security Advisory page. Watch our informative BEC webinar here to learn how to safeguard yourself against cyber fraud.

Stop. Think before you act.

Stay vigilant and do not respond to any email that asks for your confidential information. When you are unsure, please verify the request by contacting the bank through a registered number. If you receive any phone calls, SMSes or email notifications alerting you on unknown transactions within your account, please call us immediately at +‌6‌0‌3‌-‌8‌3‌1‌7‌-‌5‌2‌0‌0‌. You can also immediately block your online banking account access from our OCBC Velocity login page or Business Mobile Banking app.