How to prevent incoming CEO Fraud Mails?

[Joe-ESET2016 0]

Hello, 

is it possible to "prevent" CEO FRAUD"Mails?

I mean incoming Mails to the finance department with Sender-Adress *@own-customer-domain.com ... 

Thx in Advance!

Best Regards

[Nightowl 206]

8 minutes ago, Joe-ESET2016 said:

Hello, 

is it possible to "prevent" CEO FRAUD"Mails?

I mean incoming Mails to the finance department with Sender-Adress *@own-customer-domain.com ... 

Thx in Advance!

Best Regards

You could add the domain in your anti-spam blocklist https://support.eset.com/kb5956/?locale=en_US&viewlocale=en_US

Or if you are a client that is running Outlook and receiving spam , you can mark the message/sender as SPAM and then you can send the email and the message to [email protected] so you can report it and have ESET block it from their side

[filips 44]

Hi,

You can create a transport rule with conditions:
From header - address contains one of {list of your domains}
Sender's IP address is not one of {list of your IP addresses}

If you wish to limit this rule to the finance department, then add a condition:
Recipient's organizational units and select corresponding OUs

and actions:
Log to events
Reject message/Drop message/Quarantine message