{"id":4523,"date":"2026-10-12T12:58:37","date_gmt":"2026-10-12T10:58:37","guid":{"rendered":"https:\/\/www.klytic.com\/ceo-fraud-impersonation\/"},"modified":"2026-10-12T13:31:51","modified_gmt":"2026-10-12T11:31:51","slug":"ceo-fraud-impersonation","status":"publish","type":"page","link":"https:\/\/www.klytic.com\/en\/ceo-fraud-impersonation\/","title":{"rendered":"Impersonation and CEO fraud"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"4523\" class=\"elementor elementor-4523 elementor-4318\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e9e916b e-con-full kly-g e-flex e-con e-parent\" data-id=\"e9e916b\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-8a398d4 e-con-full kly-g-hero e-flex e-con e-parent\" data-id=\"8a398d4\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-7354d3a e-con-full kly-g-hero-in e-flex e-con e-parent\" data-id=\"7354d3a\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bfc7081 elementor-widget elementor-widget-text-editor\" data-id=\"bfc7081\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-crumb\"><a href=\"\/en\/\">Home<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/\">Guides<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/email-security\/\">Email security<\/a><\/p><p class=\"kly-g-pill\" style=\"--pill:#f87171\">Email security \u00b7 Understand<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-92b9b6c elementor-widget elementor-widget-heading\" data-id=\"92b9b6c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Impersonation and CEO fraud<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6908530 elementor-widget elementor-widget-text-editor\" data-id=\"6908530\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-lead\">CEO fraud targets a wire transfer or a change of bank details, not a computer. The message often has no attachment or link, and is sometimes technically flawless. A filter can spot a lookalike domain, a misleading display name or a known fraud scenario; the decision to pay, however, is verified through a channel the company already knows.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-908d512 elementor-widget elementor-widget-text-editor\" data-id=\"908d512\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>6 min<\/b><\/span><span>Official sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d63b43c e-con-full kly-g-body e-flex e-con e-parent\" data-id=\"d63b43c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-5083a8f e-con-full kly-g-article e-flex e-con e-parent\" data-id=\"5083a8f\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-936a747 elementor-widget elementor-widget-text-editor\" data-id=\"936a747\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>The scenario<\/h2>\n<p>The CNIL describes the fake transfer order, known as \u201cCEO fraud,\u201d in several stages. The fraudster researches the company: organization chart, customers, suppliers. They set up a fake domain name close to that of the company or a supplier, or impersonate an employee. Then they write, or call, posing as an executive or a supplier, with a request presented as urgent and approved at the top.<\/p>\n<p>The variants are similar:<\/p>\n<ul>\n<li>an unexpected, urgent and confidential transfer, requested by a fake executive or a fake group manager;<\/li>\n<li>a supplier announcing a change of bank details for upcoming invoices;<\/li>\n<li>a fake invoice, for the right amount and in the right format;<\/li>\n<li>a fake inspection by a government agency, later used to write to the company\u2019s customers with a new bank account, a scenario described by the French Ministry of the Economy.<\/li>\n<\/ul>\n<p>The lever is always human: urgency, secrecy, authority. The French Ministry of the Economy advises not to act in haste, even when faced with an insistent caller, and to be extra vigilant during holidays, when accounting departments run with reduced staff.<\/p>\n<p>An example, for illustration. Late on a Friday afternoon, an SME\u2019s accountant receives a message from the \u201cCEO\u201d: a confidential acquisition, a lawyer who will call, a transfer to make before Monday. The message has no attachment and no link. Its display name is correct, its address is not. Nothing, technically, is \u201cinfected.\u201d<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5cf2873 elementor-widget elementor-widget-text-editor\" data-id=\"5cf2873\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Four forms of impersonation, not one<\/h2>\n<div class=\"kly-table\"><table><thead><tr><th>Form<\/th><th>What it looks like<\/th><th>SPF, DKIM, DMARC<\/th><th>What can detect it<\/th><\/tr><\/thead><tbody>\n<tr><td>Spoofed display name<\/td><td>\u201cClaire Martin, CEO\u201d writing from a free email service<\/td><td>Valid for the sender\u2019s real domain; DMARC does not deal with the display name<\/td><td>Comparing the displayed name, the address and the names of the domain\u2019s executives<\/td><\/tr>\n<tr><td>Lookalike domain<\/td><td>A doubled letter, a hyphen, a different extension<\/td><td>Can be perfect for the lookalike domain<\/td><td>Resemblance to your domain or a supplier\u2019s, domain age, reputation<\/td><\/tr>\n<tr><td>Your exact domain, sent from elsewhere<\/td><td>The displayed address is the real one<\/td><td>DMARC fails; it stops the message if the domain\u2019s policy requires it<\/td><td>DMARC check on arrival<\/td><\/tr>\n<tr><td>Genuinely compromised account<\/td><td>The message comes from the executive\u2019s or supplier\u2019s real mailbox<\/td><td>Everything is valid<\/td><td>Change in behavior, content (new bank details), and above all the verification procedure<\/td><\/tr>\n<\/tbody><\/table><\/div>\n<p>The DMARC specification says so itself: it deals neither with visually similar domains nor with display-name abuse. Three cases out of four therefore escape domain authentication. The details are in <a href='\/en\/spf-dkim-dmarc-en\/'>SPF, DKIM and DMARC<\/a>, and the stolen-account case in <a href='\/en\/spam-phishing-malware-compromised-account\/'>spam, phishing, malware and compromised accounts<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9ac43b3 elementor-widget elementor-widget-text-editor\" data-id=\"9ac43b3\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What technology stops<\/h2>\n<ul>\n<li><strong>Your exact domain being spoofed<\/strong>, when the domain publishes a DMARC quarantine or reject policy.<\/li>\n<li><strong>The lookalike domain<\/strong>, by comparison with your domain, your suppliers\u2019 domains and well-known brands, and by domain age: a domain created last week that imitates yours is a strong signal.<\/li>\n<li><strong>The misleading display name<\/strong>, when the filter knows who the company\u2019s executives are and compares the displayed name with the actual address.<\/li>\n<li><strong>Known scenarios<\/strong>: urgent transfer request, change of bank details, fake invoice, invitation to call back a number. A filter can recognize these patterns in the text, even without an attachment or link.<\/li>\n<li><strong>The anomaly<\/strong>: a regular supplier suddenly writing from another country, at another time, with a request it has never made before.<\/li>\n<\/ul>\n<p>An often overlooked point: by default, a filter does not know who your executive is or who your suppliers are. Giving it that context, the names of executives and regular suppliers, is what allows it to see a fake executive.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-42e1b33 elementor-widget elementor-widget-text-editor\" data-id=\"42e1b33\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What technology does not decide<\/h2>\n<p>A filter reduces the number of fake messages that get through. It does not approve a payment. A genuinely compromised account, a plausible request, a lookalike domain not yet on any list: a message can slip through. The last barrier is a procedure.<\/p>\n<h3>Reflexes to write into the procedure<\/h3>\n<ul>\n<li><strong>Every change of bank details is confirmed through a channel already known<\/strong>: a call to the supplier\u2019s number on file, never the one given in the message. The CNIL recommends contacting known contacts by phone or in person.<\/li>\n<li><strong>Dual approval<\/strong> above a threshold, by two people, one of whom is outside the email thread.<\/li>\n<li><strong>Urgency and secrecy are warning signs<\/strong>, not reasons to go faster. A real executive accepts a callback.<\/li>\n<li><strong>An up-to-date list of supplier and customer contacts<\/strong>, as the CNIL recommends, so you know whom to call.<\/li>\n<li><strong>Heightened vigilance<\/strong> during holidays, closing periods or organizational changes.<\/li>\n<li><strong>Registering domain names similar<\/strong> to yours, and two-factor authentication on email, two measures cited by the CNIL.<\/li>\n<\/ul>\n<h3>Who needs to know these rules<\/h3>\n<p>Not only the accounting department. Executive assistants, buyers, the people who manage supplier records and those who stand in for an absent colleague are natural targets of the scenario, because they have access to payments or bank details. The CNIL recommends training employees to check domain names and to be wary of unusual requests. A short written rule, known to all and regularly restated, is better than a verbal instruction: it allows an employee to say \u201cno\u201d to a fake executive without fear of being overruled.<\/p>\n<p>If a fraudulent transfer has gone out: call the bank immediately to try to cancel it, keep the messages, and file a complaint with the police. Also warn the customers or suppliers whose name was used.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-936a261 elementor-widget elementor-widget-text-editor\" data-id=\"936a261\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Frequently asked questions<\/h2>\n<h3>Is DMARC enough against CEO fraud?<\/h3>\n<p>No. It stops exact spoofing of your domain, not the lookalike domain or the display name. See <a href='\/en\/spf-dkim-dmarc-en\/'>SPF, DKIM and DMARC<\/a>.<\/p>\n<h3>Can a message with no attachment or link be dangerous?<\/h3>\n<p>Yes. Transfer fraud needs only a credible text and a person who carries it out.<\/p>\n<h3>The message comes from the supplier\u2019s real address: is it safe?<\/h3>\n<p>Not necessarily: their account may have been stolen. See <a href='\/en\/spam-phishing-malware-compromised-account\/'>compromised account<\/a>. A phone check settles it.<\/p>\n<h3>A fraud message was quarantined: should I release it to check?<\/h3>\n<p>No. Check with the known contact, without releasing it. See <a href='\/en\/quarantine-false-positives\/'>Quarantine, false positives and reporting<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-27f6526 kly-g-klytic elementor-widget elementor-widget-text-editor\" data-id=\"27f6526\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Where Klytic stands<\/h2>\n<p><a href='\/en\/klytic-mta\/'>Klytic MTA<\/a> splits this protection between its two plans. It works in front of any email service, without Klytic Mail.<\/p>\n<div class=\"kly-table\"><table><thead><tr><th>Protection<\/th><th>Essential<\/th><th>Advanced<\/th><\/tr><\/thead><tbody>\n<tr><td>SPF, DKIM, DMARC checks, including for forwarded messages<\/td><td>Yes<\/td><td>Yes<\/td><\/tr>\n<tr><td>Brand impersonation, lookalike domains, display-name spoofing<\/td><td>Yes<\/td><td>Yes<\/td><\/tr>\n<tr><td>Unusual sender behavior<\/td><td>Yes<\/td><td>Yes<\/td><\/tr>\n<tr><td>CEO fraud<\/td><td>No<\/td><td>Yes<\/td><\/tr>\n<tr><td>Fake invoices, fake transfers, crypto, refunds, financing, phone calls<\/td><td>No<\/td><td>Yes<\/td><\/tr>\n<tr><td>SMS alert when an important sender writes<\/td><td>Option<\/td><td>Option<\/td><\/tr>\n<\/tbody><\/table><\/div>\n<p>The domain fraud context (names of executives, regular suppliers) is set by the domain administrator: see <a href='\/en\/email-filter-policies\/'>Who sets the filter in Klytic MTA<\/a>.<\/p>\n<p>What Klytic MTA does not do: it does not approve any payment and does not replace your transfer procedure. It does not see a direct phone call, only messages that invite someone to call.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f3bb85b kly-g-disclaimer elementor-widget elementor-widget-text-editor\" data-id=\"f3bb85b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>This page describes general measures. It replaces neither your bank\u2019s advice nor that of the authorities in the event of actual fraud.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ce62e63 kly-g-sources elementor-widget elementor-widget-text-editor\" data-id=\"ce62e63\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Sources<\/h2><p>Consulted in October 2026.<\/p><ul><li>CNIL, \u201cLe faux ordre de virement international ou fraude au pr\u00e9sident\u201d (Fake international transfer orders, or CEO fraud): how the attack unfolds (reconnaissance, similar domain, urgent request), prevention measures (calling back known contacts, approval procedures, registering similar domains, two-factor authentication). <a href='https:\/\/www.cnil.fr\/fr\/le-faux-ordre-de-virement-international-ou-fraude-au-president' rel='noopener' target='_blank'>cnil.fr<\/a><\/li><li>French Ministry of the Economy, \u201cSe pr\u00e9munir contre l\u2019escroquerie aux faux ordres de virement ou arnaque au pr\u00e9sident\u201d (Protecting yourself against fake transfer order scams or CEO fraud): transfer presented as urgent and confidential, impersonation of a government agency to announce a change of bank details, not acting in haste, vigilance during holidays. <a href='https:\/\/www.economie.gouv.fr\/node\/3229131' rel='noopener' target='_blank'>economie.gouv.fr<\/a><\/li><li>RFC 7489, DMARC: outside the scope of the mechanism, visually similar domain names and display-name abuse. <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc7489' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>Klytic, Klytic MTA page: how financial fraud protection is split between the Essential and Advanced plans, options, deployment modes, activation via the MX record. <a href='https:\/\/www.klytic.com\/klytic-mta\/' rel='noopener' target='_blank'>klytic.com<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1a3104b e-con-full kly-g-aside e-flex e-con e-parent\" data-id=\"1a3104b\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1da0339 elementor-widget elementor-widget-html\" data-id=\"1da0339\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<nav class=\"kly-g-toc\" aria-label=\"On this page\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-72ef7b4 elementor-widget elementor-widget-text-editor\" data-id=\"72ef7b4\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"kly-g-cta\"><h3>Reduce the risk of transfer fraud<\/h3><p>The Klytic MTA Advanced plan adds detection of CEO fraud and fake invoices.<\/p><p><a class=\"kly-g-btn\" href=\"\/en\/contact\/\">Talk to an advisor \u2192<\/a><\/p><p style=\"margin:0\"><a class=\"kly-g-btn ghost\" href=\"\/en\/klytic-mta\/\">Compare Essential and Advanced<\/a><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-db3da7d e-con-full kly-g-related e-flex e-con e-parent\" data-id=\"db3da7d\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5dfa038 elementor-widget elementor-widget-text-editor\" data-id=\"5dfa038\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"kly-g-grid\"><a class=\"kly-g-card\" href=\"\/en\/spam-phishing-malware-compromised-account\/\" style=\"--cat:#dc2626\"><span class=\"c\">Understand \u00b7 Email security<\/span><span class=\"t\">Spam, phishing, malware and compromised accounts<\/span><span class=\"q\">Four threats come through the same door and are not handled the same way. What gives each one away, what stops it, and why anti-spam alone is no longer enough.<\/span><span class=\"m\"><span>6 min read<\/span><b>Read \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/en\/spf-dkim-dmarc-en\/\" style=\"--cat:#dc2626\"><span class=\"c\">Understand \u00b7 Email security<\/span><span class=\"t\">SPF, DKIM and DMARC: what they protect, and what they do not<\/span><span class=\"q\">SPF, DKIM and DMARC prevent others from using your exact domain. They do not read the message: what they stop, what gets through, how to deploy them.<\/span><span class=\"m\"><span>6 min read<\/span><b>Read \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/en\/quarantine-false-positives\/\" style=\"--cat:#dc2626\"><span class=\"c\">Use \u00b7 Email security<\/span><span class=\"t\">Quarantine, false positives and reporting<\/span><span class=\"q\">What happens to a message held by Klytic MTA, how to release it, correct a false positive and report a malicious message.<\/span><span class=\"m\"><span>6 min read<\/span><b>Read \u2192<\/b><\/span><\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-47ba7642 e-con e-atomic-element e-div-block-base e-default-div e-47ba7642-0a8d8cb \" data-id=\"47ba7642\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"47ba7642\" data-e-type=\"e-div-block\" data-id=\"47ba7642\">\n    <div class=\"elementor-element elementor-element-1957dcf0 e-con e-atomic-element e-div-block-base e-default-div e-1957dcf0-65bb45b \" data-id=\"1957dcf0\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"1957dcf0\" data-e-type=\"e-div-block\" data-id=\"1957dcf0\">\n    \t\t\t<p class=\"e-34902a51-b78d132 e-paragraph-base e-default-p\" data-interaction-id=\"34902a51\" data-e-type=\"widget\" data-id=\"34902a51\">Welcome offer<\/p>\n\t\t\t\t\t<h2 data-interaction-id=\"54c96233\" class=\"e-54c96233-632171d e-heading-base e-default-h2\" data-e-type=\"widget\" data-id=\"54c96233\">30 days free trial, migration support included<\/h2>\n\t\t\t\t\t<p class=\"e-6661c7ce-fdde46c e-paragraph-base e-default-p\" data-interaction-id=\"6661c7ce\" data-e-type=\"widget\" data-id=\"6661c7ce\">No-commitment trial. An advisor calls you back to understand your needs and prepare your Klytic workspace.<\/p>\n\t\t<div class=\"elementor-element elementor-element-761c01f e-con e-atomic-element e-div-block-base e-default-div e-761c01f-cf11a99 \" data-id=\"761c01f\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"761c01f\" data-e-type=\"e-div-block\" data-id=\"761c01f\">\n    \t\t\t<a href=\"https:\/\/www.klytic.com\/en\/30-day-free-trial\/\" target=\"_self\" class=\"e-2f43419f-52885cf e-button-base e-default-a\" data-interaction-id=\"2f43419f\" data-e-type=\"widget\" data-id=\"2f43419f\">\n\t\ud83d\ude80 Start the free trial\n<\/a>\n\t\t\t\t\t<a href=\"https:\/\/www.klytic.com\/en\/pricing\/\" target=\"_self\" class=\"e-31327e4d-45bbc1a e-button-base e-default-a\" data-interaction-id=\"31327e4d\" data-e-type=\"widget\" data-id=\"31327e4d\">\n\tSee pricing\n<\/a>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"CEO fraud and email impersonation | Klytic","_seopress_titles_desc":"Fake executive, fake supplier, new bank details: the four forms of impersonation, what a filter detects, and the procedures that stop the fraud.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"CEO fraud and email impersonation | Klytic","_seopress_social_fb_desc":"Fake executive, fake supplier, new bank details: the four forms of impersonation, what a filter detects, and the procedures that stop the fraud.","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"CEO fraud and email impersonation | Klytic","_seopress_social_twitter_desc":"Fake executive, fake supplier, new bank details: the four forms of impersonation, what a filter detects, and the procedures that stop the fraud.","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-4523","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/pages\/4523","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/comments?post=4523"}],"version-history":[{"count":0,"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/pages\/4523\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/media?parent=4523"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}