The problem: anyone can write your sender address
The sender of an email can be forged as easily as the sender of a letter. The only thing that stops it is three settings on your domain that the recipient’s mail server can look up.
SPF, DKIM and DMARC in a minute
- SPF is a list of the servers allowed to send email for your domain.
- DKIM is a digital signature on each email that shows it has not been changed on the way.
- DMARC tells the recipient what to do with emails that fail SPF or DKIM: let them through, put them in spam or reject them. It can also send you reports on who is sending in your name.
Why does it matter?
Without DMARC, a scammer can send an invoice from "accounts@your-domain.com" to your customers, and it lands in the inbox. It damages trust in you, and in the worst case a customer pays the wrong account. Large email providers are also setting stricter requirements for senders without DMARC.
Why it is easy to get wrong
Many businesses send email through several services: email provider, newsletter, webshop and accounting. All of them must be covered. If the rules are tightened before that is in place, your own emails can end up in spam or be rejected. Email security is included in all my packages.
Is this a problem for you?
It can be technical to check and fix properly. Let me take a look at it for you.
Reply within 1-2 working days.