Business Email Compromise Protection: What Each Plan Includes and Proves

Business email compromise cost US victims almost $3.05 billion in reported losses in 2025, the second largest category in the FBI's annual count. Only one of the three leading vendors of business email compromise protection publishes a price. Microsoft lists Defender for Office 365 at $2 and $5 per user a month. Abnormal and Proofpoint send you to sales, and their efficacy numbers cannot be compared with each other.

The short answer, for anyone searching which plan they need: on Microsoft 365, BEC impersonation protection starts at Defender for Office 365 Plan 1, which is now bundled with Microsoft 365 E3 and Business Premium. Abnormal and Proofpoint add behavioural and supplier-account detection on top. Neither publishes a list price, so the comparison you can actually run is feature coverage, not cost per mailbox.

What business email compromise protection has to catch now

Business email compromise is fraud carried out over email without malware. The attacker poses as an executive, a colleague or a supplier and asks for a payment, a bank detail change or a document. There is no attachment to sandbox and often no link to rewrite.

That is why BEC sits apart from ordinary phishing in every vendor's packaging. Filters built to catch malicious files and URLs have nothing to inspect. The only signal is whether the message makes sense for the sender, the recipient and the relationship between them.

For a decade, staff training told people to look for clumsy grammar and odd phrasing. Generative models removed that signal. A lure written by a language model reads like a competent colleague, in the right tone, in any language your team uses.

The FBI's own foreword to the 2025 report names artificial intelligence as one of the technologies that will keep cyber-enabled crime evolving. It does not quantify how many BEC cases involved AI-written text, and nobody else has measured that credibly either. I would treat any vendor statistic claiming a precise AI share of BEC as marketing until it publishes a method.

Vendor compromise is the hard case

The most expensive version of BEC does not impersonate anyone. It uses a real supplier's real mailbox, taken over by the attacker, to send a real-looking invoice with new bank details. Domain checks pass, the sender history is genuine and the thread may even be a reply to your own message.

Catching that requires a model of what normal looks like for each supplier relationship. This is where the three vendors differ most, and where their plan pages are least specific. Your payment controls matter as much as your filter here, which is the argument made in the piece on payment controls that survive a deepfake CFO call.

The BEC loss math, per mailbox and per complaint

The FBI counted almost $3.05 billion of reported BEC losses in 2025, from what an Opstream analysis of the same data puts at 24,768 complaints. Divide one by the other and the average reported loss is about $123,000 per complaint. That figure is ours, and it is a mean, so a handful of very large frauds lift it well above the typical case.

What happens to the money after the wire leaves is covered in the analysis of the FBI recall window and recovery rates, so this post stays on the prevention side. The question here is narrower. What does it cost to put a BEC detection layer in front of a mailbox, and how does that compare with one incident?

What 1,000 mailboxes cost on Microsoft's list price

At Microsoft's list prices, Plan 1 for 1,000 users costs $24,000 a year and Plan 2 costs $60,000. The step from Plan 1 to Plan 2 is $36,000 a year, or about 29% of one average reported BEC loss. Most firms negotiating an enterprise agreement pay less than list.

The same arithmetic cannot be done for Abnormal or Proofpoint, because neither publishes a number to multiply. That gap is the finding. A buyer can model one vendor in a spreadsheet before calling anyone, and must take two vendors' word for it.

Microsoft Defender for Office 365: what each plan includes for BEC

Microsoft sells three layers. Exchange Online Protection is the baseline filter every Microsoft 365 mailbox gets. Defender for Office 365 Plan 1 and Plan 2 sit above it, sold standalone or bundled into suites.

The bundling changed this year. Microsoft's service description says that beginning 1 July 2026, Plan 1 is included with Office 365 E3 and Microsoft 365 E3, alongside Microsoft 365 Business Premium. Plan 2 remains in E5, A5 and G5. If you are on E3 and paying separately for Plan 1, check your renewal, a problem explored in the breakdown of Microsoft 365 renewal tier math.

Plan 1 is where impersonation protection lives

The anti-phishing policies row in Microsoft's service description is marked available in both plans. Its footnote is the line that matters for BEC: user and domain impersonation protection is available with Plan 1. That is the feature that flags a message from a lookalike domain or a display name copying your finance director.

Plan 1 also carries Safe Links, Safe Attachments and real-time detections for investigating a message. Microsoft's product page lists a capability called BEC attack disruption without stating which plan includes it. Ask your account team in writing before assuming it is in the tier you own.

Plan 2 adds response, not a better BEC detector

Plan 2 adds Threat Explorer in place of real-time detections, threat trackers, campaign views, automated investigation and response, attack simulation training and integration with Defender XDR. Every one of those helps a security team find and clean up an attack faster. None of them is described as a stronger BEC classifier.

My view is that most firms under 1,000 seats buying Plan 2 for BEC are buying the wrong thing. The attack simulation training is useful, but the detection you were worried about was already in Plan 1. Spend the difference on a payment verification process instead.

Proofpoint: BEC protection sold as packages, priced on request

Proofpoint's enterprise email product is called Core Email Protection, and its package page lists four tiers under collaboration security: Core, Tier 2, Tier 3 and Prime. The page does not publish prices. Its FAQ says budgetary pricing depends on the number of user licences and contract term.

Proofpoint's Core Email Protection page states that the product blocks phishing, BEC and ransomware. So basic BEC detection is in the entry package by the vendor's own description. The harder question is supplier compromise.

Supplier account protection is above the entry tier

The package comparison has a row reading "Defend against compromised supplier accounts", marked yes in three of the four columns. The Tier 2 card describes expanding protection beyond email with account takeover protection. Read together, supplier account coverage appears to start above Core, though the comparison table does not label its columns clearly enough to be certain.

A separate row, "Prevent domain fraud and spoofing", is marked yes in only one column, and the Prime card says it adds impersonation protection. If lookalike domains are your main BEC exposure, confirm which tier carries that row before you sign.

The small business line has been renamed

Proofpoint's old Essentials tiers now redirect to Proofpoint 365 Total Protection, sold through the Hornetsecurity business Proofpoint acquired. Its plans are named Plan 1 Business, Plan 2 Enterprise, Plan 3 Enterprise Backup and Plan 4 Compliance and Awareness. BEC detection is listed on the page without saying which plan carries it. Older Essentials price sheets still circulate on reseller sites, but they predate the rename and should not anchor a budget.

Abnormal: behavioural BEC detection sold as modules

Abnormal connects to Microsoft 365 or Google Workspace through an API rather than sitting in the mail flow. Its homepage says it deploys in 60 seconds with no MX record changes. That design means it reads mail after the platform filter, and can pull a message back out of an inbox.

Abnormal sells modules rather than tiers. Its navigation lists Inbound Email Security, AI Security Mailbox, AI Phishing Coach, Email Productivity, Account Takeover Protection and several identity and AI governance products. No page states which BEC capability belongs to which module or what any module costs.

What the behavioural model is meant to catch

The Inbound Email Security page says it detects novel BEC, AI-generated lures and payload-free attacks. The mechanism, which Abnormal calls Attune, builds a behavioural baseline for every employee and vendor. This is the approach most directly aimed at the vendor compromise case, because it judges whether a message fits a relationship rather than whether a domain looks fake.

The trade-off is that Abnormal is an additional layer, not a replacement for the platform filter. You still pay for Exchange Online Protection or Defender underneath it. Abnormal's homepage argues customers can save on gateway licensing, which is true only if you were paying for a separate gateway to begin with.

The plan-by-plan BEC feature and price table

This table records what each vendor's own pages state, as checked on 1 November 2026. Where a page is silent or ambiguous, the cell says so rather than filling the gap from reseller listings or memory.

BEC and vendor compromise coverage by plan, from vendor pages, November 2026

Plan	List price	Impersonation and BEC	Supplier account compromise	Post-delivery response
Microsoft Defender for Office 365 Plan 1	$2 per user a month, paid yearly. In Business Premium and E3.	User and domain impersonation protection, anti-spoofing	Not described as a named feature	Real-time detections, manual
Microsoft Defender for Office 365 Plan 2	$5 per user a month, paid yearly. In E5.	Same as Plan 1	Not described as a named feature	Explorer, automated investigation and response
Proofpoint Core Email Protection	Not published. Priced on users and term.	BEC named in product description	Appears to start at Tier 2	Varies by package
Proofpoint Prime	Not published	Adds impersonation protection per package card	Included	Included per package page
Abnormal Inbound Email Security	Not published. Pricing URL returned 404.	Behavioural BEC and payload-free detection	Vendor baseline described on product page	API-based removal from inbox
Where Microsoft wins	Only public price	Already bundled in suites you may own	Weakest stated coverage of the three	Native to the platform

Prices are list, before enterprise agreement discounts. "Not described" means the vendor page does not name the feature, not that the product cannot detect the attack. Proofpoint tier placement is inferred from a comparison table whose columns did not render clearly.

Vendor efficacy claims for BEC protection, labelled by methodology

Every vendor in this market publishes a headline number. None of the three publishes one that a buyer can reproduce, and the numbers measure different things. The useful work is to label each claim by who measured it, against what and over which period.

Published email security efficacy claims and what stands behind them

Claim	Who measured	Window and sample stated	What it can tell you
Proofpoint: blocks 99.999% of advanced email threats; 1 in 19.7 million false positive rate	Proofpoint	No window, sample or definition of efficacy on the page	Very little. The denominator is undefined.
Proofpoint: catches 97% of BEC threats other providers miss	Proofpoint	Competitors not named, no method	Nothing testable
Abnormal: over 1,200 attacks per 1,000 mailboxes a month bypassed upstream gateways	Abnormal, own customers	12 months to 31 May 2026, all customers, normalised	Selection biased: firms buy Abnormal because their gateway was missing things
Abnormal: 46 times fewer misses than general LLMs	Abnormal	2 sets of 1,000 messages, 1 March to 23 June 2026	Beats generic chatbots, not rival email vendors
Microsoft: about 55% fewer high-severity threats missed than the next SEG	Microsoft	Window stated, sample size not on the page	Microsoft grading rivals on its own telemetry

Microsoft's benchmark measures rivals inside its own tenant

Microsoft publishes a benchmarking page covering May to July 2026. It reports that integrated cloud email security vendors running alongside Defender add very little to malicious mail detection. Its figure for Abnormal is a 0.06% gain on malicious content, and 0.16% for Proofpoint's API product.

Read that with care. Microsoft defines the measure inside its own telemetry, credits itself first for any message both products caught, and does not publish the sample on the page. It is the most specific benchmark in the market and also the most conflicted.

The two numbers about Abnormal cannot both be read the same way

Abnormal says it finds over 1,200 attacks per 1,000 mailboxes a month that gateways missed. Microsoft says Abnormal adds 0.06% to malicious detection. Both can be true, because one counts attacks and the other counts a share of all mail, and each vendor picked the denominator that flatters it.

This is the single most useful thing a buyer can learn about the category. A number without its denominator is not evidence. Ask any vendor for missed BEC messages per 1,000 mailboxes a month, measured in your own tenant during a trial, and compare like with like.

Where this comparison is weakest

This post compares what vendors publish, and that is not the same as what their products do. A buyer reading only plan pages would conclude Microsoft has the weakest supplier compromise coverage. That may be wrong in practice, because Microsoft's models can detect a compromised supplier thread without the plan page naming it as a feature.

The price comparison is lopsided by construction. Microsoft has a list price because it sells through a self-serve storefront. Abnormal and Proofpoint negotiate every enterprise deal, and their real per-mailbox price at your seat count may undercut Defender Plan 2. I could not verify that from any public source, and I have not used reseller quotes because they are not vendor list prices.

The strongest case against my view on Plan 2 is the response tooling. A team that can run automated investigation and pull a lure from 400 inboxes in minutes limits the damage from the attack that got through. If your security team is staffed and acts on alerts, Plan 2 can be worth its price for that alone. If nobody watches the console, it is not.

Finally, the $123,000 average is a mean of reported cases only. Many BEC losses are never reported to the FBI, and the median case is smaller than the mean. Use it to size the order of magnitude, not to build a business case to the dollar.

Frequently asked questions

Where to start

Open your Microsoft 365 admin centre today and check which Defender for Office 365 plan your licences already include. If you are on E3 or Business Premium, you own Plan 1 and its impersonation protection, so turn the impersonation policy on for your finance team and executives before buying anything else.

Then ask Abnormal and Proofpoint for one thing each: a 30-day report-only trial and a count of BEC messages they caught that your current filter missed, per 1,000 mailboxes. That single number, measured in your tenant, is worth more than every efficacy claim quoted above. If you are writing the case up for leadership, the guide to case studies with verified outcomes sets out what a defensible before-and-after looks like.

Prices and plan inclusions in this post were last verified on 1 November 2026. Recheck them every 90 days, because Microsoft changed its E3 bundle mid-year and may do so again.

Related reading