CEO fraud / BEC
A mail that looks like the boss. Urgent. Confidential. Transfer now.
INCIBE: fake CEO; man-in-the-email changing a real invoice IBAN; payroll diversion. Alicante Sep 2026: €2,000 salary sent to the wrong account. Madrid: a fake oil CEO asked for six €20,000 payments.
FBI IC3: $2.77bn worldwide in 2024. Spain 2025–26: Black Axe arrests, a €140m network.
Call the number already in the address book. Dual control on new IBANs. Interns do not buy gift cards for the boss.
How the scam is built
Hurry + fake authority + a channel you do not control (link, PDF, AnyDesk, reverse Bizum, new IBAN). Check on the channel you already trust: the app you installed, the number on the card, a .gob.es address you type yourself.
What to do
- Do not tap the link in the message. Type the site or open the installed app.
- Never read out an SMS code. Never paste a 12-word seed in a chat.
- 017 INCIBE. Report at denuncias.policia.es or a police station.
- hola@safe.madrid — no passwords, no ID photo.
safe.madrid summarises INCIBE, Police, CNMV and AEMPS alerts. It is not those agencies.
