CEO Fraud
A scam where an attacker impersonates a company executive to trick an employee into making a fraudulent payment or disclosure.
CEO fraud↗ (a form of business email compromise) is a scam where an attacker impersonates a company executive, usually by email, to pressure an employee, often in finance or HR, into making an urgent wire transfer, purchasing gift cards, or disclosing sensitive data. The message typically stresses secrecy and urgency to discourage the employee from double-checking.
These scams succeed because they exploit↗ hierarchy and trust rather than any technical vulnerability↗. Organizations counter CEO fraud with clear policies requiring a second, independent verification, such as a phone call, before acting on any unusual financial request, no matter who it appears to come from.