Email fraud, also known as business email compromise (BEC), is one of today’s greatest cyber threats. These socially engineered attacks seek to exploit people rather than technology. They are highly targeted, sent in low volumes, and impersonate people in authority.

Email fraud preys on human nature–fear, the desire to please, and more–to steal money and valuable information from employees, customers, and business partners.

Proofpoint analyzed more than 160 billion emails sent to more than 2,400 companies spanning 150 countries. Here are their findings for 2017.