If your domain isn’t set up to stop it, a stranger can send an email that shows
your exact address in the “From” line. This is called email
impersonation, or spoofing.
It can go to your clients, staff or suppliers, and it lands looking completely genuine.
This is how “we’ve changed our bank details” fraud usually starts: the
message looks like it came from you, so people trust it and pay.
Most small firms have this gap and never know, because nothing on their website shows it.
Our free check reads your domain’s public settings.
It then shows you, on screen, a forged email made to look like it came from you.
Nothing is sent, to you or anyone else.
What the report gives you
Protection for your clients, staff and suppliers against criminals sending
email in your name.
Peace of mind: a plain-English answer to “can someone pretend to be
us?” – and how.
The exact settings to close the gap (SPF, DKIM and DMARC), ready for a
competent person, such as your email provider, IT support or web developer, to apply in
minutes.
A safe, step-by-step plan that tightens protection without blocking your own
genuine email.
Your current settings shown in full, so you know exactly where you stand.
We never log in to or change your systems. We give you the exact settings;
you or your provider make the change. That keeps you in control and us out of your mailbox.
£41.3 million was lost to invoice and mandate scams in the UK in
2025, across 2,305 cases. In these scams a criminal poses as a supplier, often by email,
and says the bank details have changed. £28 million of it came from business accounts,
and only 48% was returned to the victims. Source: UK Finance, Annual Fraud Report 2026, page 41.
£3.9 million was lost to invoice fraud in September 2025 alone,
in 83 cases reported – more than £47,000 each on average. Source: National Crime Agency, 29 January 2026.
These figures cover every way criminals do this, including hacked mailboxes,
not only forged addresses. The right settings close the forged-address route, which is the
one anyone can use without breaking in.
Stay protected: we keep watch
Settings get changed, email providers get switched, and protection can be weakened by accident.
We re-check your domain every day.
If your protection drops, we email you straight away, with the exact fix.
So you find out quickly – not after a criminal has used the gap.
The full report, plus twelve months of monitoring: we keep watch and tell you straight away
if your protection ever slips. Choose what happens after the year:
Payment is taken securely by Stripe — we never see or hold your card
details. Prices shown in pounds, VAT where applicable.
Common questions
Is the demonstration safe?
Yes. It is drawn on screen, in your browser. Nothing is sent – not to you, and not to
anyone else.
Will you fix it for me?
We give you the exact settings and a clear plan, but we don’t log in to your systems.
A competent person, such as your email provider, IT support or web developer, applies the
change — it usually takes minutes. This keeps you in control and avoids anyone taking
your email down by mistake.
I’m already protected — will the check say so?
Yes. If your domain is properly protected, the check says so plainly and there’s
nothing to buy.
How quickly can this be fixed?
Usually in minutes, once your email provider or IT person adds the settings in the report.
Its Check my changes button then confirms it.