What is business email compromise, in practice?

“A payload-free fraud: an attacker impersonates an executive or supplier — or writes from a genuinely compromised account — to redirect payments or extract data. Because there is nothing to detonate, it is caught by context: sender history, financial intent, pressure cues, and lookalike analysis.”