Confirmed business email compromise (BEC) losses range from $140,000 to $1.5 million, compared to an average of roughly $40,000 in early 2025.

Small businesses incured at least $131 billion in losses from fraud, scams, and ransomware last year.

Average losses for small businesses ranged from nearly $60,000 for payment fraud to more than $90,000 for email compromise.