{"success":true,"data":{"id":"wire-transfer-ceo-fraud-phish","label":"Fake executive (CEO/CFO) impersonation requesting urgent wire transfer before close of business with explicit instruction not to reply to the email but call directly — one of the highest-loss BEC fraud patterns tracked by FBI IC3; real wire-transfer requests go through authenticated banking portals and dual-approval controls, never cold email with \"don't reply, call me\" directives.","description":"Fake executive impersonation (CEO/CFO Business Email Compromise) requesting an urgent wire transfer before close of business today, with an explicit instruction not to reply to the email but to call the sender directly — one of the highest-loss fraud vectors tracked by the FBI IC3 (BEC losses exceeded $2.9B in 2023). Real wire-transfer requests from executives go through authenticated banking portals, established vendor-payment workflows, and dual-approval controls; cold emails impersonating executives with \"urgent wire before COB — don't reply to this email, call me directly\" are a textbook BEC pattern. The combination of urgency (COB deadline), wire transfer demand, and \"don't use email, call me\" channel-switch instruction is the defining triple-signal for this attack class. Distinct from gift-card-ceo-fraud-phish (gift-card purchase narrative) and brokerage-t-plus-1-settlement-failure-margin-call-lure (brokerage settlement) — this targets the executive impersonation / urgent wire transfer / close-of-business deadline pretext. Detection: urgent wire transfer + before close of business/COB + don't reply/call me directly vocabulary + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +5. Source: GC1-R27; FBI IC3 BEC/EAC Advisory 2024; FinCEN BEC financial institution advisory; CISA BEC phishing alert.","tier":"danger","category":"phishing","isThin":false}}