Civil Guard Arrests Suspect in Sophisticated BEC Corporate Fraud Case

Cybercrime in Spain has become increasingly sophisticated, posing a serious threat to corporate security. This was highlighted by a recent Civil Guard operation in Santa Cruz de Tenerife, where an individual was arrested for a complex digital identity theft known as Business Email Compromise (BEC). The target was a company based in Huesca.

The case shows how easily administrative protocols can be bypassed through social engineering. The attacker intercepted electronic communications and posed as an employee of the Huesca firm, requesting that their salary be paid into a new bank account. Although the company’s finance department followed standard verification procedures and asked for proof of ownership, the fraudster provided forged documents to trick them into approving the change.

The scam was only discovered when the actual employee reported that they had not received their wages. Once the company filed an online report, the Civil Guard’s specialized cybercrime unit, "Equipo @," took over the investigation. By tracing the flow of money and analyzing digital records, agents were able to block the transfer and identify the person who received the funds.

This incident underscores how professional cybercriminals have become. They no longer rely solely on technical hacks; instead, they exploit the trust inherent in internal business communications. BEC scams are now one of the biggest challenges for corporate security, requiring companies to be extremely cautious when validating sensitive information.

The suspect is now in the hands of judicial authorities in Tenerife. Police are using this case to remind businesses that reporting such crimes as early as possible is essential for recovering stolen funds.