How to protect your business from email impersonation

Did you know that anyone can send an email that looks like it came from your company? The "from" address on an email is not checked by default. It is simply text, typed by whoever sent the message, and it can be made to say anything at all.

That is why so many fake invoices, fraudulent payment requests and convincing phishing emails appear to come from a real supplier, a real colleague, or your own finance team.

Domain hardening is the work of closing that gap. Three linked settings, known as SPF, DKIM and DMARC, allow the rest of the world to verify that an email claiming to come from your business genuinely did.

This is a guide we have prepared to help explain what is SPF, DKIM and DMARC in simple terms, along with common issues we see.

Arlio Email Impersonation Protection Guide.pdf

Download PDF • 730KB