SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-bec-payroll

An email 'from an employee' asks HR to change their direct deposit account. What is this?

A BEC variant that can send a paycheck to a scammer.

Start playing free

  1. A normal payroll update to approve fast
  2. A routine bank notice
  3. A fake request, possibly business email compromise ✔

Why: Attackers spoof or take over an employee's email to redirect pay. HR should confirm any bank change in person or by phone on a known number.

Huh, didn't know that: The FBI says victims should also tell their employer about irregular payroll deposits.

The dad joke
I just got fired from my job at the keyboard factory. They told me I wasn't putting in enough shifts.
Like this card?
Play the game

References

Answer: A fake request, possibly business email compromise. Attackers spoof or take over an employee's email to redirect pay. HR should confirm any bank change in person or by phone on a known number.

  1. FBI IC3: Business Email Compromise PSA www.ic3.gov/PSA/2019/PSA190910
    receives spoofed emails appearing to be from employees requesting a change to their direct deposit account
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyYour 'CEO' joins a video call and urgently asks for a wire transfer. What does the FBI warn?Security & PrivacyA vendor emails new bank details for the next payment. What does the FBI advise?Security & PrivacyYou wired money to a fraudster's account. What does the FBI say to do right away?

That's stuff everyone should know.