Your customers get defrauded
They receive a fake invoice, a false payment link or a request to share login details. They believe it came from you. When they find out, trust in your company is damaged, even though you are the victim too.
Email security:only genuine email from you gets through
Picture this: a customer receives an email that looks like it came from you. Your name, your logo, your address. But the message is fake, sent by criminals using your identity to defraud your customer. Meanwhile you know nothing about it.
This is not hypothetical. It happens to hundreds of companies every day. Without the right technical protection, anyone can send email in your company name. Literally anyone.
We protect your email domain, so only genuine email from you reaches your customers, and criminals cannot abuse your name.
Email spoofing
What is the problem?
Email was built as an open system. It was never designed with security in mind. The result: without extra measures it is technically very easy to send a message that looks exactly as if it came from you.
That is email spoofing: forging the sender address. The recipient sees [email protected], but the message never went through your server. It came from a criminal abusing your domain. The consequences for your company are serious.
Your reputation suffers
Customers who were defrauded through an email carrying your name do not forget quickly. Word of mouth works in both directions.
Your own email ends up in spam
When your domain is abused for spam, email providers start treating it as untrustworthy. Genuine messages from you then land in your customers’ spam folders more and more often.
Possible liability
If customers can show your domain was insufficiently protected and that they suffered damage as a result, that can have legal consequences.
The solution
How we protect your email: SPF, DKIM and DMARC
The technical solution consists of three protocols working together. They sound technical, and they are. But the result is simple: criminals can no longer send email in your company name.
Who is allowed to send on behalf of your domain?
SPF (Sender Policy Framework) is a list of the mail servers officially allowed to send email for your domain. Receiving mail servers check on arrival whether the message came from an authorised server. If it came from a server that is not on your SPF list, that is a signal the message is fake.
A digital signature on every message
DKIM (DomainKeys Identified Mail) puts an invisible digital signature in every email you send. That signature is unique to your domain and cannot be forged. The receiving mail server checks it. Valid? Then the message really is from you. Missing or invalid? Then something is wrong.
The conductor that ties it together
DMARC (Domain-based Message Authentication, Reporting and Conformance) connects SPF and DKIM and decides what happens to messages that fail the checks. You set the policy: are suspicious messages let through, quarantined, or rejected outright? DMARC also produces reports, so we can see when someone tries to send email in your name.
Our approach
What we actually do for you
01
An analysis of where you stand
We check whether SPF, DKIM and DMARC are already set up correctly for your domain. Many companies have one of the three in place but with mistakes, which means the protection does not actually work. We map exactly where the gaps are.
02
Correct implementation
We configure SPF, DKIM and DMARC properly for your domain, including the DMARC policy that fits your situation, from monitoring only to blocking fake email outright.
03
Continuous monitoring
We actively watch for attempts to send email in your domain name. You get clear reports of the fake messages we blocked, without technical jargon.
04
Better delivery of your real email
A useful side effect: receiving mail servers judge your messages as trustworthy. Less chance of the spam folder, better deliverability for your newsletter, quotes and customer communication.
What's at stake?
This is what it looks like when it goes wrong
No technical jargon, just situations every business owner recognises.
Fake email sent in your name
Without protection against forged email
Criminals send email to your customers using your domain name as the sender. The messages look professional and contain a false invoice or a link to a fake login page. Two customers pay a fraudulent invoice of € 3,400. A third enters their password on a page that mimics your customer portal. You know nothing about it until an angry customer calls. Trust in your company is damaged with several customers at once.
The damage
- Customers who transferred money to criminals
- Direct financial loss for your customers (€ 3,400 in this example)
- A liability question: was your domain properly protected?
- Lost trust and broken customer relationships
- Hours of communication and crisis management
What would have prevented this?
DMARC, SPF and DKIM are technical settings that stop others from sending email on behalf of your domain. Without them your domain is open to abuse. With monitoring in place, we detect attempts immediately.
FAQ
Frequently asked questions about email security
How do I know whether my address is already being abused?
Usually you do not, unless a customer or contact warns you. We can run a free analysis that shows immediately whether your domain is vulnerable and whether abuse is already happening.
Does this work if I do not run my own mail server?
Yes. SPF, DKIM and DMARC are set at the level of your domain name, not the mail server. So it works with Gmail, Microsoft 365 and every other email service.
My IT supplier already set this up. Is that enough?
Possibly, but far from always. A misconfigured DMARC record offers no protection at all. We check for free whether the current configuration is correct and complete.
I also send email through a newsletter tool or accounting package. What then?
Those services need to be included in your SPF record. If that is not set up correctly, their messages can be marked as suspicious. We make sure every legitimate sending channel is configured properly.
What if I do not arrange this?
Then anyone can send email in your company name today. No technical barrier, nothing for you to see, nothing for you to stop. The question is not whether this gets abused, but when.
Free email analysis
Protect your name in every message that goes out
Criminals abuse unprotected email domains every day. We close that door: quickly, correctly and fully managed.