Fortra: BEC Global Insights: May 2026 Findings

Name: Fortra: BEC Global Insights: May 2026 Findings
Uploaded: 2026-07-30T20:07:49-04:00
Duration: 1 min 20 s
Description: BEC attacks continue to surge and the tactics behind them may surprise you. From gift cards and cryptocurrency scams to free webmail accounts, cybercriminals are finding new ways to cash out. In the May BEC Global Insights report, JT Newby breaks down ...

Fortra

07/30/2026

0 (0%)

Report Like Favorite

TL;DR

BEC attack volume increased 16% in May 2026 compared to April, continuing a sustained upward trend that organizations should treat as a persistent threat baseline.
Gift cards accounted for 52% of all BEC cashout attempts, with Amazon gift cards the most frequently requested, followed by Apple Store and iTunes.
Fortra's FIRE team tracked 45 cryptocurrency scams in May involving 54 unique Bitcoin wallet addresses, with ransom demands ranging from $514 to $12,000.

Summary

In this monthly threat intelligence briefing, Fortra's Principal Threat Research Lead JT Newby presents key findings from the May 2026 BEC Global Insights Report. Business email compromise attack volume rose 16% in May compared to April, continuing an upward trend that shows no signs of slowing. Gift cards remain the dominant cashout method, representing 52% of all BEC attacks, with Amazon gift cards leading, followed by Apple Store and iTunes. Advanced fee fraud and wire transfers round out the top cashout methods. Fortra's FIRE team identified 45 cryptocurrency-related scams in May, involving 54 unique Bitcoin wallet addresses, with requested amounts ranging from $514 to $12,000. On the delivery side, 62% of BEC attacks were sent from free webmail providers, while 38% originated from maliciously registered domains. The core takeaway is that while attack volume continues to climb, the underlying tactics remain consistent and well-documented — meaning employee awareness and robust verification protocols are the most effective defenses organizations can deploy right now.

Chapters

0:00 - Introduction & Context
0:13 - Attack Volume Trends
0:23 - Cashout Methods & Crypto Scams
0:53 - Key Takeaways

Key Quotes

0:13 "During May, attack volume continued its upward trajectory with a 16% increase in overall attack volume compared to April."
0:23 "Gift cards remain the most common cashout method, accounting for 52% of all attacks, followed by advanced fee fraud and wire transfers."
0:45 "In May, 62% of BEC attacks were sent from free webmail providers, while 38% originated from maliciously registered domains."

FAQ

What cashout methods are BEC attackers using most frequently?

Gift cards are the most common cashout method, accounting for 52% of all BEC attacks in May 2026. Amazon gift cards are the most requested, followed by Apple Store and iTunes. Advanced fee fraud and wire transfers are also common methods.

How are BEC emails being sent — from hacked accounts or fake domains?

In May 2026, 62% of BEC attacks were sent from free webmail providers such as Gmail or Yahoo, while 38% originated from maliciously registered domains purpose-built for the attack.

Categories:

» Data Protection

Tags:

Show more Show less

TL;DR

Summary

Chapters

Key Quotes

FAQ

Discover DLP Memories: The ever-evolving triage agent enhancing efficiency each shift.

Safeguarding Sensitive Data in the Era of Public AI Platforms

Same Tactics, Enhanced Speed: AI Agents’ Impact on Identity Attacks