Banks can reduce security risks posed by email hoaxes through several steps: external source alerts, stricter email policies, employee education, use of domain-based message authentication, and software tools, American Banker says.