# Can network monitoring stop CEO fraud?

Mostly no, and it is better to know that up front. In CEO fraud, an e-mail, call or chat message that seems to come from a senior manager persuades an employee to make a payment. The messages travel through your mail provider's cloud and the payment goes through online banking, both of which look entirely normal on the network. A network detection tool such as NetSenX does not read e-mail content and cannot tell a genuine payment instruction from a fake one. What stops CEO fraud is process: a rule that no payment is made on the strength of a message alone, a call-back to a number from your own records, dual approval for transfers above a set amount, and explicit permission for staff to delay any request that claims to be urgent and secret. Network monitoring does help in one case: when the fraud starts with a hacked mailbox and the attacker also reaches company systems.

FAQ: [Phishing and e-mail aftermath](https://netsenx.com/en/faq/phishing) · https://netsenx.com/en/faq/can-network-monitoring-stop-ceo-fraud

## Read next

- https://netsenx.com/en/is-someone-inside-your-network
- https://netsenx.com/en/what-is-ndr

## Related questions

- [Can a phishing e-mail come from a colleague's real account?](https://netsenx.com/en/faq/can-phishing-come-from-a-colleagues-real-account)
- [A supplier asks us to change their bank details. How do we check it is genuine?](https://netsenx.com/en/faq/supplier-asks-to-change-bank-details)
- [We paid a fraudulent invoice. What should we do now?](https://netsenx.com/en/faq/we-paid-a-fraudulent-invoice-what-now)
- [A supplier's e-mail account was hacked and they wrote to us. What should we do?](https://netsenx.com/en/faq/supplier-email-was-hacked-what-should-we-do)
- [Why can't a network security tool stop invoice fraud?](https://netsenx.com/en/faq/why-cant-a-network-tool-stop-invoice-fraud)