Email fraud, also known as business email compromise (BEC), is one of today’s greatest cyber threats. These socially engineered attacks seek to exploit people rather than technology. They are highly targeted, don’t include attachments or URLs, arrive in low volumes, and impersonate people in authority. These and other factors make email fraud difficult to detect and stop with traditional security tools. Email fraud, which spans a range of attacks and techniques, was rife in 2017.