Stopping Business Email Compromise in Insurance Agencies

Agencies move money and data by email

Premium payments, claim disbursements, and sensitive documents flow through agency inboxes every day. Business email compromise takes advantage of that routine.

How attacks happen

• A client or carrier email account is compromised and used to send new payment instructions
• A lookalike domain impersonates a carrier, premium finance company, or client
• An attacker gains access to an agency mailbox and quietly monitors conversations

Controls that work

• Multi-factor authentication on every mailbox
• Advanced email security that detects impersonation and lookalike domains
• Phone verification, using a known number, for any payment change
• Secure file exchange instead of attachments for sensitive documents

Train your team

Producers and account managers are busy, and attackers count on that. Short, realistic training helps them slow down at the right moments.

How WEBIT helps

WEBIT deploys email security and MFA, helps you define verification procedures, and trains your staff.