You open your inbox and something looks normal. The sender name is familiar. The message sounds like something your coworker would write. Then you notice one small thing that feels off.
Email compromise happens when someone gets control of an email account or tricks people into trusting a message that looks real.
How Email Compromise Actually Works
Attackers usually start by getting access. Sometimes they steal a password through a fake login page. Sometimes they guess a weak password. After that, they quietly watch how people communicate.
Because they spend time studying the account, their messages often feel believable. They may copy the writing style of a manager. They may wait until the timing feels right before sending anything.
The Tricks Behind the Message
A compromised account can be used to send requests that look routine. Maybe someone asks for a payment change. Maybe a message pushes you toward a fake website. The wording does the heavy lifting.
• A familiar name wearing a stranger’s plan. This is the part that catches people because the email can look completely normal at a glance.
• The fake reply chain, which is annoying because it uses a conversation you already trust instead of starting from zero.
• A rushed request. Someone suddenly needs action today, and that pressure is usually the clue worth noticing.
Why People Fall For It
Raj worked at a small office where he checked invoices every morning. He stopped reopening the same five tabs each day because the routine was finally organized. One week, a payment email looked exactly like the messages he usually received. The only difference was a new account detail hidden inside.
He caught it because he called the sender instead of replying. That tiny pause changed everything. Most attacks don’t fail because someone spots a genius clue. They fail because someone breaks the usual pattern.
And people are busy. They read messages between meetings. They answer from phones. They move quickly because email feels like a normal part of the day.
Signs Worth Taking Seriously
A few details deserve extra attention when a message involves money or sensitive information.
• A request that feels strangely urgent, especially if the sender wants you to skip your normal process.
• An email address that looks close to the real one but has a small change hiding in it.
• Something feels different. The tone is odd, the timing is strange, or the person is asking for a step they normally wouldn’t request.
How To Reduce The Risk
The best defense is a boring habit. Verify unusual requests using a different way to contact the person. Don’t trust the reply button alone if the request affects payments or account access.
Strong passwords matter. So does turning on multi-factor authentication because a stolen password becomes much less useful when another check stands in the way.
Teams should also have simple rules for sensitive requests. A quick phone call feels slower, but it often gets out of your way faster than fixing a bad transfer later.
The Human Side Of Email Security
Email compromise works because it targets trust. Technology matters, but people are still the ones making decisions inside the conversation.
That gets exhausting. Build a small habit around the messages that carry pressure or ask for something unusual.
Most days, your inbox is just your inbox. Then one strange message shows up. The question is whether you notice it before you click.