Greek Police Recover €4 Million Stolen From Shipping Company In Business Email Compromise Scam
Our take
The recent recovery of €4 million stolen from a Greek shipping company through a business email compromise (BEC) scam underscores a growing and increasingly sophisticated threat landscape facing the maritime industry. These scams, often exploiting vulnerabilities in communication protocols and human trust, are not isolated incidents. They represent a systemic risk demanding heightened vigilance and robust preventative measures. The scale of this particular loss, while significant, is likely just the tip of the iceberg, as many instances go unreported due to embarrassment or ongoing investigations. The coordinated effort by the Hellenic Police to recover the funds is encouraging, but it highlights a reactive approach to a problem that requires proactive, data-driven solutions. Addressing this requires not just law enforcement, but a fundamental shift in how organizations approach cybersecurity, especially considering the interconnected nature of global shipping and the vast amounts of data flowing through these networks. We’ve previously explored [IMO Appoints Full Team Of Regional Coordinators To Expand Global Maritime Support], demonstrating the ongoing push for greater global cooperation – a principle equally vital in combating cybercrime impacting maritime operations.
The BEC scam’s success hinges on social engineering – manipulating individuals into divulging sensitive information or transferring funds under false pretenses. In the maritime context, this is particularly dangerous given the complexity of international transactions, the reliance on email communication across multiple time zones and jurisdictions, and the potential for urgent operational demands that can override due diligence. The incident also highlights the vulnerability of seemingly secure systems when human error is introduced. Organizations must move beyond simple technical safeguards and invest in comprehensive employee training programs focused on identifying and resisting phishing attempts and other social engineering tactics. The data crisis facing the research community, as discussed in [Combatting the data crisis: a primer on using artificial intelligence in marine biodiversity], mirrors the challenges faced in cybersecurity; both require robust data management and analytical capabilities to identify patterns, predict threats, and implement effective mitigation strategies. Furthermore, the potential impact extends beyond financial losses, as compromised systems can disrupt supply chains, damage reputations, and even jeopardize the safety of vessels and crew. The expedition to map Greenland’s perilous ice sheets using a robot swarm, detailed in [A robot swarm is on a mission to map Greenland’s perilous ice sheets], showcases the advancements in data collection and analysis; similar technological approaches can be leveraged to enhance cybersecurity in the maritime sector.
The maritime industry’s reliance on interconnected systems and global trade routes makes it a prime target for cybercriminals. The integrated data ecosystem that World Data Ocean champions – one that combines disparate datasets for comprehensive ocean intelligence – also presents a potential attack surface if not properly secured. The recovery of these funds is a temporary victory, but it shouldn't lull the industry into complacency. The sophistication of these attacks is only likely to increase, requiring continuous adaptation and investment in advanced security technologies. This includes implementing multi-factor authentication, regularly auditing systems for vulnerabilities, and establishing robust incident response plans. Furthermore, greater collaboration and information sharing between shipping companies, law enforcement agencies, and cybersecurity experts are essential to stay ahead of evolving threats. A validated, empirical approach to risk assessment, focusing on measurable outcomes, is critical.
Looking ahead, the question isn’t *if* another BEC scam will occur, but *when*. The imperative is to proactively strengthen defenses, not simply react to breaches. The integration of real-time threat intelligence, coupled with calibrated security protocols, will be paramount. The future of maritime cybersecurity hinges on a shift from reactive mitigation to proactive prediction and prevention – leveraging the same innovative technologies and collaborative spirit that drive advancements in ocean exploration and understanding. How can the industry move towards a truly longitudinal view of cybersecurity risk, incorporating historical data and predictive analytics to anticipate and neutralize threats before they materialize?
Greek police have recovered €4 million stolen from a Greek shipping company after cybercriminals used a Business Email Compromise (BEC) scam to divert the money to a bank account in Bulgaria.
The fraud was reported in August 2025, when a representative of the shipping company filed a complaint with the Cybercrime Division of the Hellenic Police.
Authorities launched an immediate investigation and, through coordinated action with banking institutions and Europol, managed to freeze the funds before they could be moved to other accounts. The entire amount was later recovered.
Police said the suspects gained unauthorised access to email exchanges between the shipping company and a foreign bank it worked with.
They then used a fake email address that closely resembled the company’s official email account and sent forged payment instructions, leading to a €4 million transfer being redirected to a company bank account in Bulgaria.
Investigators have identified two foreign nationals in connection with the case. They include the legal representative of the company that received the money and another person involved in managing the account.
A case file has been submitted to the competent prosecutor on charges of computer fraud involving a particularly large amount and unauthorised access to an information system or data.
According to the Hellenic Police, the successful recovery of the funds was made possible through cooperation between the Cybercrime Division, the Authority for Combating Money Laundering, the Directorate of International Police Cooperation through its Europol Division, and the banks involved.
Police said the money was first frozen and later recovered in full before it could be split into smaller transfers or moved to other accounts.
Business Email Compromise is one of the most common forms of cyber fraud targeting businesses worldwide.
In these attacks, criminals either gain access to or impersonate corporate email accounts, monitor business communications over time, and intervene during financial transactions by changing bank account details so that payments are sent to accounts under their control.
References: shippingtelegraph, protothema
Read on the original site
Open the publisher's page for the full experience