Vendor Email Compromise Now Makes Up 61% of Business Email Fraud. DMARC Alone Won't Stop It.

Mon, 15 Jun 2026 08:00:00 +0000

Abnormal AI’s 2026 Attack Landscape Report, published in April, analyzed nearly 800,000 email attacks across more than 4,600 organizations during the second half of 2025. One finding in particular is worth pausing on: 61% of all business email compromise incidents in that dataset were vendor-related. The majority of BEC is no longer about impersonating a CEO. It is about impersonating a supplier.

That shift has direct consequences for how organizations think about email authentication – and about what DMARC can and cannot do.

Supply-Chain on Daily DMARC News

Vendor Email Compromise Now Makes Up 61% of Business Email Fraud. DMARC Alone Won't Stop It.