--- title: Ongoing Business Email Compromise Scams are a Reminder to Educate Users description: How to protect against business email compromise (BEC) phishing scams. Helpful tips for email administrators and end users. image: https://blog.mdaemon.com/hubfs/Business-Email-Compromise-2025-2.jpg --- [![MDaemon Technologies](https://blog.mdaemon.com/hs-fs/hubfs/MDaemon-Technologies_logo_large.png?width=564&height=110&name=MDaemon-Technologies_logo_large.png "MDaemon Technologies")](https://mdaemon.com/) - [Blog Home](https://blog.mdaemon.com) # MDaemon Technologies Blog ## [Ongoing Business Email Compromise Scams are a Reminder to Educate Users](https://blog.mdaemon.com/recent-business-email-compromise-bec-scams-are-reminder-to-educate-users) By [Brad Wyro](https://blog.mdaemon.com/author/brad-wyro) - [Tweet](https://twitter.com/share) Online scams are nothing new. But as email has evolved and improved, so have scammers and the messages they send. Nefarious emails, attachments and links now appear sophisticated and look legitimate, sometimes tricking even the most meticulous user.   ## **Billions Lost to Business Email Compromise** Over the past five years, organizations all over the world have [lost over $52 billion](https://www.keevee.com/business-email-compromise-statistics) to a very specific type of email scam – Business Email Compromise, or BEC. BEC scams have been around for years, and while many of the same phishing and social engineering tactics continue to be used, these attacks are evolving in complexity and sophistication, especially as AI tools like ChatGPT make it much easier to craft well-written, convincing phishing emails. ## **BEC Stories in the News** - The Houston office of the FBI and Dutch authorities [seized 39 domains](https://www.houstonchronicle.com/news/houston-texas/trending/article/houston-fbi-hacking-tools-investigation-20136121.php?utm_source=chatgpt.com) used to sell phishing kits and email-extractor tools that were used in BEC schemes. - Over US $5.3 million [forfeited in a Boston case](https://www.secretservice.gov/newsroom/releases/2025/03/united-states-secures-forfeiture-over-5-million-traceable-business-email?utm_source=chatgpt.com) involving funds laundered through intermediary bank accounts and crypto exchanges in Hong Kong, Singapore, Nigeria. - In Australia, Noosa Council was [hit by a BEC scam](https://www.couriermail.com.au/truecrimeaustralia/police-courts-qld/noosa-council-loses-23m-in-sophisticated-email-scam/news-story/4ab56fe2e6d0457b745805dedf60ef4b?utm_source=chatgpt.com) exploiting AI/social engineering for AU $2.3 million; this shows smaller organizations remain vulnerable. - A [Florida-based international scheme](https://nypost.com/2025/01/29/us-news/feds-extradite-man-from-dominican-republic-over-60m-scheme-that-tricked-sports-team-health-care-company/?utm_source=chatgpt.com), where a man was extradited from the Dominican Republic in a case of US $60 million+ fraud targeting sports teams, healthcare companies, nonprofits via BEC-style methods.   ## **Why do BEC Scams Work so Well?** *![Top 10 tips to protect against business email compromise and phishing](https://blog.mdaemon.com/hs-fs/hubfs/Business-Email-Compromise_Infographic-brief-2.jpg?width=368&name=Business-Email-Compromise_Infographic-brief-2.jpg)* BEC emails are advanced phishing scams, and they’re on the rise. But what makes a BEC attack so dangerous, and so effective?   #### **BEC Scams are Highly Targeted** Scammers aren’t blasting thousands of the same email. They’ve done the research, monitoring the company’s website and social pages. They find the appropriate target, and groom them by sending multiple conversational emails, establishing trust.   #### **They Contain No Malware** Unlike the old style of phishing, where users are told to click on a link, BEC emails have no spammy links. This means they can sometimes evade spam filters, and the end user doesn’t see any red flags.   #### **They Exploit Human Nature** BEC emails imitate an actual person, complete with real-looking email addresses, formatting, company names, and titles. The victim has unknowingly been emailing back and forth with the scammer and trusts that they are who they claim to be. So when asked to send bank information, for example, the victim assumes the request is authentic and complies.   #### **They are Often Under-reported** Victims often don’t realize they made a mistake until much later. And even upon realization, many companies don’t report the incident for fear of damaging their reputation with their customers. Not reporting such incidents allows perpetrators to simply move on to their next victim.   ### **Learn How to Stay Protected Against these Email Scams** Preventing losses to Business Email Compromise is the responsibility of both the end user and the IT administrator. To stay protected, follow these tips: #### **End Users:** - Double-check the sender email address & recognize spoofing and other impersonation tactics. MDaemon Webmail displays the full email header to help users identify spoofed emails. ![From-header-Screening_Example](https://blog.mdaemon.com/hs-fs/hubfs/From-header-Screening_Example.png?width=482&height=328&name=From-header-Screening_Example.png) *MDaemon Webmail: Full Email Header Display*   - Don’t overshare on social media - Don’t open email from unknown sources - Verify all wire transfer requests via phone or face-to-face - Know customers’ & vendors’ business practices - Run antivirus software often - Use [two-factor authentication](https://knowledge.mdaemon.com/enable-two-factor-authentication-webmail-remote-administration) - Forward, don’t reply. Ensures you manually enter the appropriate email address.   #### **Administrators:** - Enable [reverse lookups](https://help.mdaemon.com/MDaemon/en/security--reverse_lookup.html)to verify the legitimacy of the sender - Use the antivirus features in [MDaemon](https://www.altn.com/Products/SecurityPlus-Antivirus-MDaemon/)and [SecurityGateway](https://mdaemon.com/pages/security-gateway)to scan all inbound and outbound email traffic - Require users to use [SMTP Authentication](https://help.mdaemon.com/MDaemon/en/security--smtp_authentication.html) - Use [SPF](https://en.wikipedia.org/wiki/Sender_Policy_Framework), [DKIM](https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail)& [DMARC](https://en.wikipedia.org/wiki/DMARC)to secure your domain against spoofing - Require two-factor authentication - Require strong passwords - Provide regular end-user training - Run antivirus software often and make sure virus signatures are up-to-date   While traditional security measures such as network defenses and email gateways can be effective at blocking most varieties of spam, the bottom line is that the most critical part of stopping BEC attacks is user awareness and education.   Tags: [Business Email Compromise](https://blog.mdaemon.com/topic/business-email-compromise), [Email Security](https://blog.mdaemon.com/topic/email-security), [Spear Phishing](https://blog.mdaemon.com/topic/spear-phishing), [Email Spoofing](https://blog.mdaemon.com/topic/email-spoofing), [Phishing](https://blog.mdaemon.com/topic/phishing) ![Brad Wyro](https://blog.mdaemon.com/hs-fs/hubfs/Brad-2023v2.jpg?width=100&height=100&name=Brad-2023v2.jpg) #### Written by [Brad Wyro](https://blog.mdaemon.com/author/brad-wyro) Brad has worked in technical and marketing roles at MDaemon Technologies, where he contributes as Content Marketing Manager. Brad balances technical and creative information to develop easy to understand videos and content to educate prospects and customers. [![BACK TO ALL ARTICLES](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/6572702/05b24dbb-70a6-4eaa-9507-321cb27f7228.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/6572702/05b24dbb-70a6-4eaa-9507-321cb27f7228) ### Subscribe to Email Updates - [Popular](https://blog.mdaemon.com/recent-business-email-compromise-bec-scams-are-reminder-to-educate-users#tab-2) - [Recent](https://blog.mdaemon.com/recent-business-email-compromise-bec-scams-are-reminder-to-educate-users#tab-1) - [Categories](https://blog.mdaemon.com/recent-business-email-compromise-bec-scams-are-reminder-to-educate-users#tab-3) ### Lists by Topic - [Email Security (72)](https://blog.mdaemon.com/tag/email-security) - [MDaemon Email Server (44)](https://blog.mdaemon.com/tag/mdaemon-email-server) - [Email How To (36)](https://blog.mdaemon.com/tag/email-how-to) - [Email Best Practices (29)](https://blog.mdaemon.com/tag/email-best-practices) - [Phishing (28)](https://blog.mdaemon.com/tag/phishing) - [Product Updates (28)](https://blog.mdaemon.com/tag/product-updates) - [Security Gateway for Email (27)](https://blog.mdaemon.com/tag/security-gateway-for-email) - [Stop Spam Email (25)](https://blog.mdaemon.com/tag/stop-spam-email) - [Cybersecurity (24)](https://blog.mdaemon.com/tag/cybersecurity) - [Email Security Best Practices (22)](https://blog.mdaemon.com/tag/email-security-best-practices) - [Email Server (22)](https://blog.mdaemon.com/tag/email-server) - [Two-Factor Authentication (18)](https://blog.mdaemon.com/tag/two-factor-authentication) - [Email Gateway How-To (17)](https://blog.mdaemon.com/tag/email-gateway-how-to) - [Email Security Trends (15)](https://blog.mdaemon.com/tag/email-security-trends) - [Health Care Security (12)](https://blog.mdaemon.com/tag/health-care-security) - [SecurityGateway (12)](https://blog.mdaemon.com/tag/securitygateway) - [Spear Phishing (12)](https://blog.mdaemon.com/tag/spear-phishing) - [Data Leak Prevention (11)](https://blog.mdaemon.com/tag/data-leak-prevention) - [Email Encryption (11)](https://blog.mdaemon.com/tag/email-encryption) - [Anti-Spoofing (10)](https://blog.mdaemon.com/tag/anti-spoofing) - [MDaemon Webmail (10)](https://blog.mdaemon.com/tag/mdaemon-webmail) - [Email Archiving (8)](https://blog.mdaemon.com/tag/email-archiving) - [Email Management (8)](https://blog.mdaemon.com/tag/email-management) - [Email Privacy (8)](https://blog.mdaemon.com/tag/email-privacy) - [Email Spoofing (8)](https://blog.mdaemon.com/tag/email-spoofing) - [Business Email Compromise (7)](https://blog.mdaemon.com/tag/business-email-compromise) - [Anti-Virus (6)](https://blog.mdaemon.com/tag/anti-virus) - [Email Software (6)](https://blog.mdaemon.com/tag/email-software) - [Tutorial (6)](https://blog.mdaemon.com/tag/tutorial) - [Update (6)](https://blog.mdaemon.com/tag/update) - [Collaboration (5)](https://blog.mdaemon.com/tag/collaboration) - [Email Authentication (5)](https://blog.mdaemon.com/tag/email-authentication) - [Compliance (4)](https://blog.mdaemon.com/tag/compliance) - [Email Remote Administration (4)](https://blog.mdaemon.com/tag/email-remote-administration) - [MailStore Archive Server (4)](https://blog.mdaemon.com/tag/mailstore-archive-server) - [Microsoft 365 Exchange Alternative (4)](https://blog.mdaemon.com/tag/microsoft-365-exchange-alternative) - [Passwords (4)](https://blog.mdaemon.com/tag/passwords) - [Software update (4)](https://blog.mdaemon.com/tag/software-update) - [Archive (3)](https://blog.mdaemon.com/tag/archive) - [Attachments (2)](https://blog.mdaemon.com/tag/attachments) - [Business Email (2)](https://blog.mdaemon.com/tag/business-email) - [Cloud (2)](https://blog.mdaemon.com/tag/cloud) - [DMARC (2)](https://blog.mdaemon.com/tag/dmarc) - [Industry Insight (2)](https://blog.mdaemon.com/tag/industry-insight) - [MDaemon (2)](https://blog.mdaemon.com/tag/mdaemon) - [insider threats (2)](https://blog.mdaemon.com/tag/insider-threats) - [msp (2)](https://blog.mdaemon.com/tag/msp) - [Anti-Relay (1)](https://blog.mdaemon.com/tag/anti-relay) - [BEC (1)](https://blog.mdaemon.com/tag/bec) - [Backscatter (1)](https://blog.mdaemon.com/tag/backscatter) - [Bayesian Learning (1)](https://blog.mdaemon.com/tag/bayesian-learning) - [Content Filter (1)](https://blog.mdaemon.com/tag/content-filter) - [DNS-BL (1)](https://blog.mdaemon.com/tag/dns-bl) - [Disaster Recovery (1)](https://blog.mdaemon.com/tag/disaster-recovery) - [Email Collaboration (1)](https://blog.mdaemon.com/tag/email-collaboration) - [Email Software Reviews (1)](https://blog.mdaemon.com/tag/email-software-reviews) - [Encrypt (1)](https://blog.mdaemon.com/tag/encrypt) - [External Email Threats (1)](https://blog.mdaemon.com/tag/external-email-threats) - [Gateway (1)](https://blog.mdaemon.com/tag/gateway) - [Inbox (1)](https://blog.mdaemon.com/tag/inbox) - [Inbox Zero (1)](https://blog.mdaemon.com/tag/inbox-zero) - [Macros (1)](https://blog.mdaemon.com/tag/macros) - [Monitoring (1)](https://blog.mdaemon.com/tag/monitoring) - [Quarantine (1)](https://blog.mdaemon.com/tag/quarantine) - [RelayFax (1)](https://blog.mdaemon.com/tag/relayfax) - [Software (1)](https://blog.mdaemon.com/tag/software) - [Training (1)](https://blog.mdaemon.com/tag/training) - [Upgrade (1)](https://blog.mdaemon.com/tag/upgrade) - [Windows Server (1)](https://blog.mdaemon.com/tag/windows-server) - [internal email threat (1)](https://blog.mdaemon.com/tag/internal-email-threat) - [ssl (1)](https://blog.mdaemon.com/tag/ssl) - [tax scams (1)](https://blog.mdaemon.com/tag/tax-scams) see all ### Posts by Topic - [Email Security (72)](https://blog.mdaemon.com/tag/email-security) - [MDaemon Email Server (44)](https://blog.mdaemon.com/tag/mdaemon-email-server) - [Email How To (36)](https://blog.mdaemon.com/tag/email-how-to) - [Email Best Practices (29)](https://blog.mdaemon.com/tag/email-best-practices) - [Phishing (28)](https://blog.mdaemon.com/tag/phishing) - [Product Updates (28)](https://blog.mdaemon.com/tag/product-updates) - [Security Gateway for Email (27)](https://blog.mdaemon.com/tag/security-gateway-for-email) - [Stop Spam Email (25)](https://blog.mdaemon.com/tag/stop-spam-email) - [Cybersecurity (24)](https://blog.mdaemon.com/tag/cybersecurity) - [Email Security Best Practices (22)](https://blog.mdaemon.com/tag/email-security-best-practices) - [Email Server (22)](https://blog.mdaemon.com/tag/email-server) - [Two-Factor Authentication (18)](https://blog.mdaemon.com/tag/two-factor-authentication) - [Email Gateway How-To (17)](https://blog.mdaemon.com/tag/email-gateway-how-to) - [Email Security Trends (15)](https://blog.mdaemon.com/tag/email-security-trends) - [Health Care Security (12)](https://blog.mdaemon.com/tag/health-care-security) - [SecurityGateway (12)](https://blog.mdaemon.com/tag/securitygateway) - [Spear Phishing (12)](https://blog.mdaemon.com/tag/spear-phishing) - [Data Leak Prevention (11)](https://blog.mdaemon.com/tag/data-leak-prevention) - [Email Encryption (11)](https://blog.mdaemon.com/tag/email-encryption) - [Anti-Spoofing (10)](https://blog.mdaemon.com/tag/anti-spoofing) - [MDaemon Webmail (10)](https://blog.mdaemon.com/tag/mdaemon-webmail) - [Email Archiving (8)](https://blog.mdaemon.com/tag/email-archiving) - [Email Management (8)](https://blog.mdaemon.com/tag/email-management) - [Email Privacy (8)](https://blog.mdaemon.com/tag/email-privacy) - [Email Spoofing (8)](https://blog.mdaemon.com/tag/email-spoofing) - [Business Email Compromise (7)](https://blog.mdaemon.com/tag/business-email-compromise) - [Anti-Virus (6)](https://blog.mdaemon.com/tag/anti-virus) - [Email Software (6)](https://blog.mdaemon.com/tag/email-software) - [Tutorial (6)](https://blog.mdaemon.com/tag/tutorial) - [Update (6)](https://blog.mdaemon.com/tag/update) - [Collaboration (5)](https://blog.mdaemon.com/tag/collaboration) - [Email Authentication (5)](https://blog.mdaemon.com/tag/email-authentication) - [Compliance (4)](https://blog.mdaemon.com/tag/compliance) - [Email Remote Administration (4)](https://blog.mdaemon.com/tag/email-remote-administration) - [MailStore Archive Server (4)](https://blog.mdaemon.com/tag/mailstore-archive-server) - [Microsoft 365 Exchange Alternative (4)](https://blog.mdaemon.com/tag/microsoft-365-exchange-alternative) - [Passwords (4)](https://blog.mdaemon.com/tag/passwords) - [Software update (4)](https://blog.mdaemon.com/tag/software-update) - [Archive (3)](https://blog.mdaemon.com/tag/archive) - [Attachments (2)](https://blog.mdaemon.com/tag/attachments) - [Business Email (2)](https://blog.mdaemon.com/tag/business-email) - [Cloud (2)](https://blog.mdaemon.com/tag/cloud) - [DMARC (2)](https://blog.mdaemon.com/tag/dmarc) - [Industry Insight (2)](https://blog.mdaemon.com/tag/industry-insight) - [MDaemon (2)](https://blog.mdaemon.com/tag/mdaemon) - [insider threats (2)](https://blog.mdaemon.com/tag/insider-threats) - [msp (2)](https://blog.mdaemon.com/tag/msp) - [Anti-Relay (1)](https://blog.mdaemon.com/tag/anti-relay) - [BEC (1)](https://blog.mdaemon.com/tag/bec) - [Backscatter (1)](https://blog.mdaemon.com/tag/backscatter) - [Bayesian Learning (1)](https://blog.mdaemon.com/tag/bayesian-learning) - [Content Filter (1)](https://blog.mdaemon.com/tag/content-filter) - [DNS-BL (1)](https://blog.mdaemon.com/tag/dns-bl) - [Disaster Recovery (1)](https://blog.mdaemon.com/tag/disaster-recovery) - [Email Collaboration (1)](https://blog.mdaemon.com/tag/email-collaboration) - [Email Software Reviews (1)](https://blog.mdaemon.com/tag/email-software-reviews) - [Encrypt (1)](https://blog.mdaemon.com/tag/encrypt) - [External Email Threats (1)](https://blog.mdaemon.com/tag/external-email-threats) - [Gateway (1)](https://blog.mdaemon.com/tag/gateway) - [Inbox (1)](https://blog.mdaemon.com/tag/inbox) - [Inbox Zero (1)](https://blog.mdaemon.com/tag/inbox-zero) - [Macros (1)](https://blog.mdaemon.com/tag/macros) - [Monitoring (1)](https://blog.mdaemon.com/tag/monitoring) - [Quarantine (1)](https://blog.mdaemon.com/tag/quarantine) - [RelayFax (1)](https://blog.mdaemon.com/tag/relayfax) - [Software (1)](https://blog.mdaemon.com/tag/software) - [Training (1)](https://blog.mdaemon.com/tag/training) - [Upgrade (1)](https://blog.mdaemon.com/tag/upgrade) - [Windows Server (1)](https://blog.mdaemon.com/tag/windows-server) - [internal email threat (1)](https://blog.mdaemon.com/tag/internal-email-threat) - [ssl (1)](https://blog.mdaemon.com/tag/ssl) - [tax scams (1)](https://blog.mdaemon.com/tag/tax-scams) See all #### About MDaemon Technologies MDaemon Technologies is a pioneer in developing email and email security software helping to protect customers from evolving cyber-security threats. Its products and services are trusted by thousands of organizations in over 140 countries. For more than two decades, the company’s products have been developed with the ongoing input of IT professionals who demand reliable, affordable software that requires minimal effort to manage. The software can be deployed in virtual, hosted cloud, on-premises, or hybrid network environments. The company sells its software and services directly and through a network of global channel partners. For more information, visit [www.mdaemon.com](https://www.altn.com/). Copyright © 1996-2026 MDaemon Technologies.  View [privacy policy](https://mdaemon.com/policies/privacy-policy).   ###### Contact Us +1.817-601-3222 [sales@help.mdaemon.com](mailto:sales@help.mdaemon.com) 6340 Lake Worth Blvd. Fort Worth, TX 76135 ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Brad Wyro", "url" : "https://blog.mdaemon.com/author/brad-wyro" }, "dateModified" : "2026-07-14T20:06:04.342Z", "datePublished" : "2019-11-05T22:00:53.000Z", "headline" : "Ongoing Business Email Compromise Scams are a Reminder to Educate Users", "image" : [ "https://blog.mdaemon.com/hubfs/Business-Email-Compromise-2025-2.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.mdaemon.com/recent-business-email-compromise-bec-scams-are-reminder-to-educate-users", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.mdaemon.com/hubfs/MDaemon-Technologies_logo_large.png" }, "name" : "MDaemon Technologies" } } ```