FBI's Operation Eagle Sweep nets 65 BEC arrests
A coordinated international law enforcement operation arrested 65 suspects tied to Business Email Compromise schemes that caused over $51 million in losses.
Sourcefbi.gov — open the original
What to check
- Applies to
- Whether this concerns you is not assessed; the names the report mentions are listed below.
The FBI, alongside international partners including Nigeria, South Africa, Canada, and Cambodia, conducted Operation Eagle Sweep, a three-month coordinated law enforcement action targeting Business Email Compromise (BEC) actors. The operation, building on prior efforts like Operation Wire Wire and Operation reWired, resulted in 65 arrests globally and targeted scammers responsible for victimizing over 500 U.S. victims with losses exceeding $51 million. BEC schemes typically involve criminals compromising or spoofing business email accounts to trick employees into sending wire transfers to attacker-controlled bank accounts, often exploiting real estate transactions and elderly victims as well.
Several specific cases were detailed, including arrests in Houston, Texas and Lagos, Nigeria related to victimization of a Puerto Rico-based renewable energy supplier, involving an international money laundering network that moved at least $4.5 million in fraud proceeds. Additional indictments in Houston covered laundering of nearly $900,000 from BEC proceeds, while a Toronto-based scheme resulted in arrests for BEC and check fraud impacting hundreds of victims with attempted losses exceeding $16 million. According to IC3, BEC and related email account compromise schemes caused nearly $2.4 billion in reported losses in 2021 alone.
This is primarily a law enforcement disruption and prosecution story rather than a technical threat report — it involved no malware analysis or novel TTPs, but rather multinational police cooperation to arrest individuals and money mule networks facilitating BEC fraud. The operation involved numerous agencies including the U.S. Postal Inspection Service, Australian Federal Police, Nigerian EFCC, Toronto Police, and Microsoft's Digital Crimes Unit.
Source reporting: https://www.fbi.gov/news/stories/coordinated-operation-disrupts-global-bec-schemes-033022
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,436 reports from 149 sources, 661 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs