Cybersecurity experts have noticed an uptick in business email compromise (BEC) scams in which threat actors go after monthly employee paychecks.

The scam starts with a threat actor impersonating an employee of a targeted company in an email to the firm’s department that is in charge of payroll. The crook will ask the department to change the details for his/her direct deposit account, with the aim of getting the department to begin depositing paychecks into an account controlled by the attacker.

Read more: BEC Scammers Go After Employee Paychecks