The FBI just put a number on it. $3 billion lost to business email compromise in 2025. Average loss per incident: $123,000. 86% of it moved by wire or ACH before anyone noticed.
None of that money was stolen. It was authorized by a person who received something convincing and acted on it.
That is the gap traditional filters cannot close. Anti-spam needs spam. URL scanning needs a URL. Sandboxing needs an attachment. A BEC email has none of those. It is a clean message, from a plausible sender, asking for something that looks like dozens of requests that came before it.
Reading the language, understanding the relationship between sender and receiver, and inspecting the behavior are the only signals left. That is what Advanced BEC does.
What's Changing June 8th
Every Advanced Business Email Compromise (ABEC) customer without an active policy gets a Monitor Mode policy created automatically.
Monitor Mode is informational. Nothing is held. Nothing is rejected. Mail flow does not change. What you get is real-time visibility into the BEC attacks already reaching your users, surfaced inside the Administration Console.
The point is to show you what is getting through today with your data, not ours - before you decide how to respond.
What To Do With It
Review what Monitor Mode surfaces. Who is being targeted. What attackers are asking for. How often these messages are landing.
When you are ready, move the policy to Hold. That is where Advanced BEC stops being a visibility tool and starts intercepting attacks before they reach inboxes.
No action is required on June 8th. But the longer Monitor Mode runs, the clearer the case for Hold becomes.
Why By Default
The Verizon DBIR and FBI IC3 reports consistently rank BEC among the most financially damaging email-based attacks and generative AI is making it worse. By producing highly convincing, payloadless social engineering at scale, AI lowers the barrier for attackers and raises the risk for organizations. Because there's no malicious payload to detect, behavioral AI is the most effective defense. Advanced BEC protection gives organizations the tools they need to stay ahead of this evolving threat.
Waiting for customers to opt in to visibility is no longer a defensible default.
See what is getting through. Then decide what to hold.
For guidance on configuring your Advanced BEC policy, see: Advanced BEC - Setup with Cybergraph.
Follow our Service Updates to catch the next change before it lands.
