Email Spoofing Check
Find out if someone can send email that looks like it came from you
We check the three records that decide it and send you the answer in writing.
Three records decide whether a stranger can send mail in your name
- SPF lists the servers allowed to send as you. Missing or wrong, and anybody can.
- DMARC tells the receiving mail server what to do when something fails the check. Most small businesses have no DMARC record at all, which means the answer is "deliver it anyway."
- MX says where your mail actually goes. Worth knowing if it still points somewhere you stopped using.
All three are public. You can look them up yourself in a few minutes and we’ll tell you how.
Check my domain
If it’s open, we close it. We set the records, send test mail to confirm yours still gets delivered, and tell you when it’s done.
What the check usually also shows is how much of the rest of your setup nobody has looked at in a while.
Frequently Asked Questions
Does this mean my email is being spoofed right now?
Not necessarily. A DNS check shows whether somebody could, not whether somebody has.
Can I just do this myself?
Yes. The records are public and the lookup tools are free. The work is knowing what to set them to without breaking the mail you do want delivered, which is where most people stop.
Will fixing this stop my email going to spam?
It helps and it isn’t the only cause. We’ll tell you what the records change and what they don’t.