TL;DR: Business email compromise cost organizations $2.77 billion in 2024, according to the FBI's IC3 — the second-largest loss category after investment fraud, and one aimed squarely at businesses rather than individual consumers.
Business email compromise cost organizations $2.77 billion in 2024, according to the FBI's IC3 — the second-largest loss category after investment fraud, and one aimed squarely at businesses rather than individual consumers.
What the Data Shows
BEC scams typically don't rely on malware at all — they use a convincingly spoofed or hijacked email account to trick an employee into wiring money or changing payment details, which is why verifying payment changes by phone is still the single best defense.
Why This Matters
Numbers like these are a reminder that this isn’t a rare event — it’s a routine risk. Checking whether your own information has already been exposed takes 30 seconds and costs nothing.
If this looks similar to something else you've seen, it's worth reading Cryptocurrency Scam Statistics 2026.
This pattern shows up elsewhere too — see Data Breach Statistics 2026: How Many Records Were Exposed.
Frequently Asked Questions
What do the numbers actually show?
Business email compromise cost organizations $2.77 billion in 2024, according to the FBI's IC3 — the second-largest loss category after investment fraud, and one aimed squarely at businesses rather than individual consumers.
What does this mean for you?
BEC scams typically don't rely on malware at all — they use a convincingly spoofed or hijacked email account to trick an employee into wiring money or changing payment details, which is why verifying payment changes by phone is still the single best defense.
Where does this data come from?
This data is drawn from FBI IC3 – 2024 Internet Crime Report, a primary reporting source for fraud and identity theft data.