Business email compromise is a phishing method where scammers and other threat actors use email as a tool to reach (usually key) members of an organisation and trick them into revealing sensitive information or sending money.