[[:start|Home]] > [[:faq|FAQ]] > [[faq:security|Security]] > [[faq:security#general|General]] > [[faq:security:phishing_mail_samples|Phishing Email Samples]] > **CEO or Executive Fraud Mail** ====== Phishing Emails Unveiled: CEO or Executive Fraud Mail ====== {{:faq:security:phishing_mail_samples:12-7.jpg?600|}} In this scam, cybercriminals impersonate high-ranking executives, such as CEOs or CFOs, to deceive employees into taking certain actions, often involving financial transactions or sharing sensitive information. ---- ===== Common Characteristics ===== ==== 1. Fake Domain ==== The scammer creates a fake email address that appears to be identical or very similar to the genuine executive's email address. They may use small variations in the email domain to make it appear authentic at first glance. ==== 2. Urgency and Authority ==== The email exploits the recipient's sense of urgency and the perceived authority of the executive. Since the email appears to come from a high-level executive, recipients may hesitate to verify the request, fearing they might offend or disappoint the executive. ==== 3. Social Engineering ==== The email may use social engineering tactics, such as flattery or coercion, to manipulate the recipient into complying with the request. ==== 4. Potentially Dangerous Attachments or Links ==== The email may contain malicious attachments with the intention of infecting the recipient's device with malware, ransomware, or other harmful software. ---- ===== Useful Tips ===== ✅ Always verify unusual or high-value requests from executives, especially those involving financial transactions or sensitive data. ✅ Beware of emails that demand immediate action or secrecy. Take your time to validate the request, even if it appears to be from a high-level executive.