Recognizing business email compromise (BEC) scams