$3 billion
lost to business email compromise in 2025, from 24,768 complaints to the FBI.
Source: FBI IC3, 2025 Internet Crime Report
How do I protect my business from scams?
Verify payment changes by phone. Call a vendor or boss at a number you already have, never one in the message.
Match every invoice to an order. Don't pay bills for listings, supplies or services you can't trace.
Know the payment red flags. Gift cards, crypto and urgent wire transfers are what scammers ask for.
Lock down accounts. Turn on multifactor authentication and change default voicemail PINs.
Train your team. Many business scams start with one employee answering one message.
$20.9 billion
in total cybercrime losses reported to the FBI in 2025, up 26% from 2024.
Source: FBI IC3, 2025 Internet Crime Report
What are the top 10 scams targeting businesses?
| Scam | Red flag | What to do |
|---|---|---|
| 1. Phishing | A message pushes you to click a link or confirm account details. | Go to the company's site yourself. Don't use the link. |
| 2. Business email compromise | A boss or vendor emails an urgent wire request or new bank details. | Call to confirm at a number you already have. |
| 3. Ransomware | Files lock and a note demands payment. | Disconnect, call IT and report to ic3.gov. Keep offline backups. |
| 4. Phony invoices | A bill for something you can't match to an order. | Check it against purchase records before paying. |
| 5. Tech support | A pop-up or call says your computer is infected. | Hang up. Never give remote access to a stranger. |
| 6. Stolen identity | Customers ask about accounts or offers you never made. | Warn customers and report it to BBB Scam Tracker. |
| 7. Overpayment | A buyer pays too much and asks for the difference back. | Wait for the payment to clear fully. Refund nothing early. |
| 8. Office supplies | A caller “confirms” a toner or supply order. | Let one person approve all supply orders. |
| 9. Deepfakes | A familiar voice or face asks for money on a call or video. | Use a code word for payment requests. Call back to confirm. |
| 10. Charity pitches | Pressure to sponsor or donate today. | Check the charity at Give.org first. |
Learn more about these scams
What should I do if my business is scammed?
1
Stop the money
Call your bank or payment provider right away. Fast action may help recover a wire transfer.
2
Lock it down
Change passwords on email and bank accounts and turn on multifactor authentication.
3
Report it
File with BBB Scam Tracker and ic3.gov. In Canada, contact the Canadian Anti-Fraud Centre.
4
Warn your people
Tell staff what happened, and tell customers if scammers used your name.
Avoid these scams aimed at businesses
What scams are targeting businesses right now?
BBB AI Hub
How can my business use AI without getting scammed?
Get practical guidance on choosing AI tools, protecting your data and spotting deepfakes.
Business scam questions, answered
Short answers from BBB. Each links to the full guidance.
Phishing and business email compromise top BBB's list of scams targeting small businesses. Both start with a message that seems to come from someone you trust, like a vendor, bank or your own boss, and push you to click, pay or share account details fast.
Match every invoice to a purchase order or contract before you pay. Watch for unfamiliar vendors, new bank details, tight deadlines and threats of legal action. If anything changed, call the vendor at a number you already have, not the one on the invoice.
Call your bank right away and ask it to recall the transfer; speed matters. Then file a complaint with the FBI at ic3.gov, report it to BBB Scam Tracker and change passwords on any email account the scammer may have used.
No. Required federal workplace posters are free from the U.S. Department of Labor, and many states offer theirs free too. Official-looking notices that demand payment for posters are often scams.
They request ownership of your listing and hope you miss Google's email alert. Once in control, they can change your phone number, website or hours. Reject requests you didn't make and check your profile often.
Report it to BBB Scam Tracker to warn other owners. In the U.S., also report it to the FTC at ReportFraud.ftc.gov and, for online crime or wire fraud, to the FBI at ic3.gov. In Canada, contact the Canadian Anti-Fraud Centre.
Where does BBB's research on business scams come from?
Spotted a scam targeting your business?
Your report helps other owners avoid it. Read more business tips in our Biz HQ.