Deepfake video-call follow-up BEC email — post-call enforcement email "confirming" wire transfer discussed in a deepfake Teams/Zoom call, with inline routing numbers and confidentiality instructions. Mandiant Apr 2026; FBI IC3 2025 ($1.4B deepfake BEC); FinCEN 2026.
deepfake-video-call-follow-up-bec-email
What this tier means
Warning signal — bulk / marketing / mild spam. Contributes to the trash score but is not by itself sufficient.
How Gorganizer detects this
A follow-up email sent after a deepfake video call (Teams, Zoom, Google Meet) impersonating a CFO, CEO, or senior executive, which "confirms" the wire transfer or credential change that the deepfake call instructed. The email references the call ("as we discussed on today's call"), provides bank account wire details or routing numbers inline, and includes confidentiality instructions to prevent the victim from verifying with colleagues. This is entirely distinct from existing deepfake signals that detect emails initiating or delivering deepfake content — this detects the post-call enforcement email. Mandiant's April 2026 Threat Intelligence report documents this two-stage model; the FBI IC3 2025 Annual Report identifies it as responsible for 34% of all deepfake-BEC incidents, totaling $1.4B in 2025 losses.
False-positive guard
Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a warning-tier signal — bulk / marketing / mild spam. It contributes to the trash score but never triggers deletion on its own. Gorganizer requires multiple signals + a margin over the safety floor before any email is moved to trash.
About the scoring engine
Gorganizer's scoring engine emits 2,143+ signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.
Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.
Ready to clean your inbox?
Gorganizer scans your Gmail with this signal and 2,143+ others, then cleans everything in one click. $4.99 one-time, no subscription.
Get started