--- title: Is Your Business at Risk of a Vendor Email Compromise (VEC)? description: "It never fails: just when you feel like you have a grasp on current cybercrime trends, hackers are already coming up with something new that you have to worry about protecting yourself from and educating your employees about. This week, we’re talking about vendor email compromise (VEC). What is a vendor email compromise? VEC is […]" --- [Skip to main content](https://bluelayer.com/blog/is-your-business-at-risk-of-a-vendor-email-compromise#main) [![Blue Layer](https://bluelayer.com/hubfs/raw_assets/public/website-theme/images/blue-layer/bluelayer-logo_white.png) ![Blue Layer](https://bluelayer.com/hubfs/raw_assets/public/website-theme/images/blue-layer/bluelayer-logo_color.png)](https://bluelayer.com/) - [Home](https://bluelayer.com/) - [Managed Services](https://bluelayer.com/managed-services/) - [Advisory Services](https://bluelayer.com/advisory-services/) - [Servers & Cloud Services](https://bluelayer.com/servers-cloud-hosting/) - [Communications](https://bluelayer.com/communications/) - [Networking & SD WAN](https://bluelayer.com/networking/) - [Cybersecurity](https://bluelayer.com/cybersecurity/) - [Disaster Recovery](https://bluelayer.com/disaster-recovery/) - [Physical Security](https://bluelayer.com/physical-security/) - [Enterprise AI Advisement](https://bluelayer.com/enterprise-ai) - [Cybersecurity](https://bluelayer.com/cybersecurity/) - [About Us](https://bluelayer.com/about-us/) - [Blog](https://bluelayer.com/blog/) - [Support](https://bluelayer.com/support/) - [Contact Us](https://bluelayer.com/contact/) [Client Portal](https://portal.bluelayer.com/) ![Blue Layer](https://bluelayer.com/hubfs/raw_assets/public/website-theme/images/blue-layer/bluelayer-logo_color.png) - [Home](https://bluelayer.com/) - [Managed Services](https://bluelayer.com/managed-services/) - [Advisory Services](https://bluelayer.com/advisory-services/) - [Servers & Cloud Services](https://bluelayer.com/servers-cloud-hosting/) - [Communications](https://bluelayer.com/communications/) - [Networking & SD WAN](https://bluelayer.com/networking/) - [Cybersecurity](https://bluelayer.com/cybersecurity/) - [Disaster Recovery](https://bluelayer.com/disaster-recovery/) - [Physical Security](https://bluelayer.com/physical-security/) - [Enterprise AI Advisement](https://bluelayer.com/enterprise-ai) - [Cybersecurity](https://bluelayer.com/cybersecurity/) - [About Us](https://bluelayer.com/about-us/) - [Blog](https://bluelayer.com/blog/) - [Support](https://bluelayer.com/support/) - [Contact Us](https://bluelayer.com/contact/) [Client Portal](https://portal.bluelayer.com/) # Is Your Business at Risk of a Vendor Email Compromise (VEC)? [Security Alerts](https://bluelayer.com/blog/tag/security-alerts) BL Blue Layer Team June 24, 2021 3 min read Copy link [LinkedIn (opens in a new tab)](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fbluelayer.com%2Fblog%2Fis-your-business-at-risk-of-a-vendor-email-compromise) [Email](mailto:?subject=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EIs+Your+Business+at+Risk+of+a+Vendor+Email+Compromise+%28VEC%29%3F%3C%2Fspan%3E&body=https%3A%2F%2Fbluelayer.com%2Fblog%2Fis-your-business-at-risk-of-a-vendor-email-compromise) It never fails: just when you feel like you have a grasp on current cybercrime trends, hackers are already coming up with something new that you have to worry about protecting yourself from and educating your employees about. This week, we’re talking about vendor email compromise (VEC). **What is a vendor email compromise?** VEC is a type of business email compromise (BEC) that goes after a company’s critical supply line information instead of targeting the employees themselves, as we see with things like CEO fraud. - First, VEC hackers will monitor a business’s transaction habits and use that data to pinpoint one specific vendor of theirs that would be most lucrative to scam. - Second, they draft phony emails addressed to these vendors that look almost identical to the real thing. - Then, they will use hacked email accounts to send requests for payment to their customers. - Since these invoices are modeled after ones that go out to these customers all the time, vendors will often proceed to pay them, not realizing that they direct to the hacker’s bank accounts and not the legitimate source. **What is the result of a successful vendor email compromise?** [**Tremendous cost, according to KnowBe4.**](https://blog.knowbe4.com/vendor-email-compromise-is-officially-a-big-seven-figure-problem)The average cost of a VEC attack? A whopping $183k! Not to mention compromised vendor information and business financial details. **Is your business at risk?** According to the same linked article from KnowBe4, the chances of getting hit during any given week have increased by over 80% between Q3 of 2020 and January of this year. That’s a giant leap in a small amount of time, meaning that your entire team should always be as vigilant as possible. Unfortunately, cybercriminals will never stop working on new ways to make something appear to be what it is not. It doesn’t help when they are particularly good at their job, making it harder and harder to combat them day-to-day. Especially when their attacks start to look like an email you might receive on a normal workday! ![](https://bluelayer.com/hubfs/Imported_Blog_Media/blog-body-VEC-700x467.jpg) So, if your business works with vendors that sound like they could be vulnerable to the attack that we’ve described, then you should pursue [**cybersecurity awareness training**](https://bluelayerit.com/services/?service_var=cybersecurity_services) for all of your employees that work directly with financial transactions. It will help them understand the scams they’re up against and how to avoid falling into the traps set in front of them. [**Click here to learn how Blue Layer can help protect your business today.**](https://bluelayerit.com/contact-us/) Questions about how this applies to your business? Talk it through with a Blue Layer specialist. The first conversation is on us. [Start a conversation](https://bluelayer.com/contact/) [Previous post Cybersecurity Alert: Beware of Video Verification Deepfakes](https://bluelayer.com/blog/beware-of-video-verification-deepfakes) [Next post Breaking Down Cybersecurity with Blue Layer: What is Spear Phishing?](https://bluelayer.com/blog/what-is-spear-phishing) Search Search ## Recent Post - [“We Have Backups” Isn’t Enough July 30, 2026](https://bluelayer.com/blog/we-have-backups-isnt-enough) - [The 3-2-1 Backup Rule Still Matters July 30, 2026](https://bluelayer.com/blog/the-3-2-1-backup-rule-still-matters) ## Categories [Advancements and Trends](https://bluelayer.com/blog/tag/advancements-and-trends) [Blue Layer News](https://bluelayer.com/blog/tag/blue-layer-news) [Security Alerts](https://bluelayer.com/blog/tag/security-alerts) [Cybersecurity](https://bluelayer.com/blog/tag/cybersecurity) [Inc. 5000](https://bluelayer.com/blog/tag/inc-5000) [MSP](https://bluelayer.com/blog/tag/msp) [Partnership](https://bluelayer.com/blog/tag/partnership) [Phishing](https://bluelayer.com/blog/tag/phishing) [RingCentral](https://bluelayer.com/blog/tag/ringcentral) [Zoom Phishing](https://bluelayer.com/blog/tag/zoom-phishing) ## Archives [2026](https://bluelayer.com/blog/archive/2026) [2025](https://bluelayer.com/blog/archive/2025) [2024](https://bluelayer.com/blog/archive/2024) [2023](https://bluelayer.com/blog/archive/2023) [2022](https://bluelayer.com/blog/archive/2022) [2021](https://bluelayer.com/blog/archive/2021) [2020](https://bluelayer.com/blog/archive/2020) [2019](https://bluelayer.com/blog/archive/2019) [2018](https://bluelayer.com/blog/archive/2018) [2017](https://bluelayer.com/blog/archive/2017) Have a question about your IT? Our team is happy to talk it through, no strings attached. [Talk to a specialist](https://bluelayer.com/contact/) [or call 806.687.4765](tel:8066874765) [![Blue Layer](https://bluelayer.com/hubfs/raw_assets/public/website-theme/images/blue-layer/bluelayer-logo_white.png)](https://bluelayer.com/) Not sure where to start? Let's just meet for coffee and chat! Coffee is on us and we'd love to learn about you. - - - - ## Company - [About Us](https://bluelayer.com/about-us/) - [Blog](https://bluelayer.com/blog/) - [Support](https://bluelayer.com/support/) - [Contact Us](https://bluelayer.com/contact/) ## Services - [Managed Services](https://bluelayer.com/managed-services/) - [Advisory Services](https://bluelayer.com/advisory-services/) - [Cybersecurity](https://bluelayer.com/cybersecurity/) ## Contact Info Toll Free: [866.430.2647](tel:8664302647) Lubbock: [806.687.4765](tel:8066874765) South TX: [210.686.5877](tel:2106865877) North TX: [214.884.3555](tel:2148843555) **Corporate Office:** 6102 82nd St #13 Lubbock, TX 79424 **Operations Office:** 6119 79th St Lubbock, TX 79424 ## Support & Operations Hours Mon-Thu 8am-6pm Friday 8am-5pm Sat-Sun 9am-5pm Emergency Support Toll Free 24/7: [866.430.2647](tel:8664302647) © 2026 **Blue Layer.** All Rights Reserved. | Security License# B25182501 - [Terms](https://bluelayer.com/terms-and-conditions/) - [Privacy](https://bluelayer.com/privacy-policy/) - [Support](https://bluelayer.com/support/) - [Accessibility](https://bluelayer.com/accessibility) [Remote Support](https://remote.bluelayer.com/) [Verify Agent](https://bluelayer.com/blog/is-your-business-at-risk-of-a-vendor-email-compromise#verify-agent) × ## Verify a Blue Layer agent Always **verify who you are speaking with.** Whether we initiate a call or visit your location, use this tool to confirm the person is a verified Blue Layer agent. Enter the 6-digit ID Token the agent gave you. Verify Invalid token ## Agent verified The ID Token is valid. You are speaking with a **Verified Blue Layer Agent.** Verify another agent Trust, but verify all contacts. Checking hours How can we help? [Remote Support (opens in a new tab)Let a tech connect to your computer](https://remote.bluelayer.com) [Client Portal (opens in a new tab)Open and track your tickets](https://portal.bluelayer.com/) [Verify an AgentConfirm who you're talking to](https://bluelayer.com/blog/is-your-business-at-risk-of-a-vendor-email-compromise#verify-agent) [Call 806.687.4765Talk to the help desk now](tel:8066874765) [support@bluelayer.com](mailto:support@bluelayer.com) [All support options](https://bluelayer.com/support/) Weekend hours: phones only A person is answering calls right now. Emailed tickets are not checked on weekends. [Call 806.687.4765Answered live until 5 PM CT](tel:8066874765) [Email a ticketWaits until Monday morning, when our help desk returns](mailto:support@bluelayer.com?subject=Support%20ticket) More options [Remote Support (opens in a new tab)Let a tech connect to your computer](https://remote.bluelayer.com) [Client Portal (opens in a new tab)Open and track your tickets](https://portal.bluelayer.com/) [Verify an AgentConfirm who you're talking to](https://bluelayer.com/blog/is-your-business-at-risk-of-a-vendor-email-compromise#verify-agent) We're closed right now Our help desk reopens soon. Here is how to get the right help. Emergencies only A **business-impacting emergency with no workaround**: your business can't operate and there is no other way to keep working. [Call 806.687.4765 now](tel:8066874765) Not an emergency? You have two options: [Fastest way to reach a person Call when we reopenYou'll talk to our help desk right away](tel:8066874765) [Email a ticket nowHandled next business day](mailto:support@bluelayer.com?subject=Support%20ticket) Cookie preferences ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Admin", "url" : "https://bluelayer.com/blog/author/admin" }, "dateModified" : "2026-09-08T21:37:10.822Z", "datePublished" : "2021-06-24T12:00:00.000Z", "headline" : "Is Your Business at Risk of a Vendor Email Compromise (VEC)?", "mainEntityOfPage" : { "@id" : "https://bluelayer.com/blog/is-your-business-at-risk-of-a-vendor-email-compromise", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject" } } } ``` ```json { "@context" : "https://schema.org", "@id" : "", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "", "addressLocality" : "", "postalCode" : "", "streetAddress" : "" }, "description" : "", "logo" : "", "name" : "", "sameAs" : [ "", "", "" ], "url" : "" } ```