Which phishing category involves impersonating a known source to obtain financial advantage?

• A. Spear Phishing
• B. Impersonation
• C. Business Email Compromise (BEC)
• D. Typosquatting

Answer: (C)

Impersonating a trusted business contact to push for a money transfer is a classic Business Email Compromise scenario. In BEC, the attacker poses as someone the recipient knows and respects—such as a CEO, supplier, or finance contact—and convinces them to wire funds or disclose banking details. The strength of this tactic lies in exploiting legitimate-looking emails and internal processes to bypass suspicion, making financial gain the primary goal. Spear phishing targets credentials or data and isn’t always aimed directly at transferring money; typosquatting is about tricking victims with a fake domain to harvest information, not necessarily about impersonating a known source to steal funds. So the category that best fits the situation described is Business Email Compromise.