What we need from you
Your part.
- Access to your domain's DNS (or the person who manages it)
- Admin access to your email provider
- A list of the tools that send email for you: invoicing, booking, newsletters
ProjectsSpoofing
Projects · Email Spoofing Protection
Someone's sending
email as you.
A customer forwards an invoice you never sent, from an address that looks exactly like yours. Or your own emails keep landing in people's spam folders and you can't work out why.
We set up SPF, DKIM and DMARC on your domain and keep an eye on the reports, so it's much harder to fake your email and your real mail gets delivered.
Part of our Cybersecurity service.
What you get
Done, and handed over.
- Every service that sends mail as you found: your mailbox, invoicing, newsletters, your website
- SPF set up to list the services allowed to send for you
- DKIM signing turned on for each of them
- DMARC set up and tightened step by step, without blocking your real mail
- DMARC reports monitored for anyone trying to send as your domain
- Plain-English notes on every record and why it's there
How it works
A clear start and finish.
- 01
Tell us your domain
Your domain, your email provider and anything else that sends email for you.
- 02
We check and quote
We look at your current records and what's sending as you, then send a fixed scope and a quote.
- 03
We set it up
SPF, DKIM and DMARC put in place, starting gently so nothing legitimate gets blocked.
- 04
We tighten and watch
Once the reports show only your real mail, DMARC is tightened to stop the fakes, and we keep monitoring.
Who it's for
A good fit if…
Any business that sends invoices, payment details or anything else worth faking by email.
- A customer or vendor got a fake email that looked like yours
- Your emails land in spam, especially at bigger companies
- You've never heard of SPF, DKIM or DMARC
Where we do it
Remote, anywhere in the U.S.
Email spoofing protection is done remotely, so we can do it for businesses anywhere in the United States.
From the blog
Worth a read.
FAQ
Questions we get asked.
Will this stop all fake emails?
It stops scammers sending from your exact domain to mail servers that check DMARC, which most big providers do. It can't stop lookalike domains with a letter swapped, so your team still needs to look twice at payment requests.
Could this block my real email?
Not if it's done in steps. We start in a watch-only mode, find every service that sends for you, and only tighten things once the reports show your real mail passing.
Do I need this if I'm small?
Yes. Google's email sender guidelines ask every sender to set up SPF or DKIM, and bulk senders need all three. Scammers also like small businesses because the records are often missing.
How is it priced?
Every project is quoted once we see your domain and what sends for you. Tell us about it through the contact form.
Every project is quoted
Tell us about your project.
Tell us what you have now and what you need. We'll quote the job and tell you straight if it's not one for us.
Tell us about your project →