---
title: BEC Scammers Are Expanding from Nigeria to the US, Research Finds
description: Business email compromise (BEC) is a global problem responsible for $26 billion in losses since June 2016, and the latest Agari research shows that the distribution of threat actors is much more diffuse, now covering more than 50 countries.
image: https://businessinsights.bitdefender.com/hubfs/Metaphor-for-data-protection-1097554548_5752x3769.jpg
---

[![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us)

[![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd)

- [For Home](https://www.bitdefender.com/solutions/)
- [For Business](https://www.bitdefender.com/business/)
- [Resources](https://www.bitdefender.com/business/resource-library.html)
- [Webinars](https://www.bitdefender.com/business/webinars.html)

# [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us)

 By [**Silviu Stahie**](https://businessinsights.bitdefender.com/author/silviu-stahie) / Oct 20, 2020

# BEC Scammers Are Expanding from Nigeria to the US, Research Finds

Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/bec-scammers-are-expanding-from-nigeria-to-the-us-agari-research-finds&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/bec-scammers-are-expanding-from-nigeria-to-the-us-agari-research-finds&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/bec-scammers-are-expanding-from-nigeria-to-the-us-agari-research-finds&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/bec-scammers-are-expanding-from-nigeria-to-the-us-agari-research-finds&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/bec-scammers-are-expanding-from-nigeria-to-the-us-agari-research-finds&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/bec-scammers-are-expanding-from-nigeria-to-the-us-agari-research-finds&utm_medium=social&utm_source=facebook)

- Nigeria is no longer the hub of BEC operations
- Many cybercriminals now operate from inside the US
- BEC scammers use people working from home to help them get a hold of the money

Business email compromise (BEC) is a global problem responsible for $26 billion in losses since June 2016, and the latest Agari research shows that the distribution of threat actors is much more diffuse, now covering more than 50 countries.

Because only high-profile BEC attacks ever reach the news, it’s easy to imagine that this type of fraud involves millions of dollars and that it only happens at very high levels. But the opposite is true, with BEC accounting for 40 percent of all cybercrime losses, and, in most cases, criminals only look to steal amounts small enough that they don’t raise immediate red flags.

In the past, Nigeria was the hub for most of these scams, but, just like the victims, the attackers are now highly multinational. Now, BEC attacks stem from more than 50 countries, with a quarter of all attackers residing in the United States, including California, Georgia, Florida, Texas, and New York.

Of course, these types of operations wouldn’t be possible without “mules,” people who willingly or unwittingly help the scammers retrieve the money.

“Over the course of 15 months, we collected 2,900 mule accounts in 39 countries, through which scammers intended to receive more than $64 million in stolen funds from BEC victims,” found the Agari [research](https://www.agari.com/insights/whitepapers/threat-intelligence-brief-geography-bec/). “While 80% of these mule accounts were located in the United States, the requested payment amounts destined for those accounts were significantly lower than other countries.”

The average payment to US-based mule accounts was $39,500, but the payment made to accounts based in Hong-Kong was, on average, $257,300, which is significantly more.

Not surprisingly, the COVID-19 pandemic helped attackers find more victims to help them. Many people lost their jobs and turned to freelance, working from home. In many situations, they were helping BEC scammers move money around.

“After a victim accepts the ‘job,’ they are put to work doing a variety of different tasks, which could include receiving and reshipping goods, receiving ‘payments’ from clients, or printing and sending checks,” states the research. “Of course these tasks are all part of fraudulent schemes the victim is unknowingly a part of.”

It’s becoming evident that BEC attacks are spreading across the world, affecting more businesses than ever. Now, with a foothold in so many countries, criminals have a much easier time finding mules and new targets.

### Explore More Topics

- [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security)
- [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research)
- [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security)
- [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security)
- [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware)
- [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection)
- [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness)
- [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management)
- [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response)
- [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response)
- [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security)
- [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence)
- [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations)
- [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief)
- [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers)
- [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured)
- [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats)
- [Events (38)](https://businessinsights.bitdefender.com/topic/events)
- [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing)
- [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services)
- [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast)
- [top (2)](https://businessinsights.bitdefender.com/topic/top)

See all topics

### Subscribe to Blog Updates

## Read more about this topic

<https://businessinsights.bitdefender.com/forget-data-breach-statistics-2016-breaches-will-get-personal?hsLang=en-us>

### [Forget Data Breach Statistics, 2016 Breaches Will Get Personal](https://businessinsights.bitdefender.com/forget-data-breach-statistics-2016-breaches-will-get-personal?hsLang=en-us)

<https://businessinsights.bitdefender.com/86-percent-increase-in-data-breaches-in-2016-led-to-1.4-billion-data-record-compromised?hsLang=en-us>

### [86% Increase in Data Breaches in 2016 Led to 1.4 Billion Data Record Compromised](https://businessinsights.bitdefender.com/86-percent-increase-in-data-breaches-in-2016-led-to-1.4-billion-data-record-compromised?hsLang=en-us)

<https://businessinsights.bitdefender.com/observations-from-rsa-2023?hsLang=en-us>

### [Observations from RSA 2023](https://businessinsights.bitdefender.com/observations-from-rsa-2023?hsLang=en-us)

![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png)

![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png)

- [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent)
- [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security)
- [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity)

- [Legal Terms](https://www.bitdefender.com/legal/)
- [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html)
- [EULA](https://www.bitdefender.com/site/view/legal-eula.html)
- [Contact Us](https://www.bitdefender.com/business/contact.html)

Copyright © 1997-2023 Bitdefender All rights reserved.

![](https://px.spiceworks.com/px/5rec)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Silviu Stahie",
    "url" : "https://businessinsights.bitdefender.com/author/silviu-stahie"
  },
  "dateModified" : "2020-10-20T08:54:01.725Z",
  "datePublished" : "2020-10-20T07:15:00.000Z",
  "headline" : "BEC Scammers Are Expanding from Nigeria to the US, Research Finds",
  "image" : [ "https://businessinsights.bitdefender.com/hubfs/Metaphor-for-data-protection-1097554548_5752x3769.jpg" ],
  "mainEntityOfPage" : {
    "@id" : "https://businessinsights.bitdefender.com/bec-scammers-are-expanding-from-nigeria-to-the-us-agari-research-finds",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png"
    },
    "name" : "Bitdefender"
  }
}
```