Between 2015 and 2019, BEC attacks cost businesses across the world over $26 billion in losses and in the last 2 years, the number of attacks has increased by 100%
Most organizations rely on protecting their email infrastructure to stop BEC attacks. They do this by securing their domain, using DMARC, DKIM, and SPF, two-factor email authentication etc.
But such an approach has limitations as it can only protect against a small subset of BEC attacks that impersonate your own domain. BEC attacks are successful because unsuspecting email users get breached.