Email spoofing check
For a great many small firms the answer is yes. If your domain is not set up to stop it, anyone can send an email that shows your exact address in the “From” line — to your clients, your staff or your suppliers — and it lands looking completely genuine.
This is how “we’ve changed our bank details” fraud usually begins. The message looks like it came from you, so people trust it and pay.
About two minutes. Nothing to install, no sign-up, no card.
The check can send a single demonstration email to your own address only — made to look as if it came from you — so you can see with your own eyes how a forged message would arrive. It goes nowhere else. You decide whether to send it, and nothing happens until you click.
If we emailed you from this address, it is because we ran a public check on your domain’s email settings and found it was not protected against this kind of impersonation. The settings we read are published for anyone to see; we simply looked, and the check above lets you confirm it yourself.
Reply to the email with the word STOP and we will not contact you again. It is read automatically and acted on the same day. You can also write to us.