Key points
- Spoofing = faking the From address to look like you
- SPF/DKIM/DMARC block most spoofing
- DMARC reject tells receivers to drop fakes
- Monitor DMARC reports
How to do it
- Set up SPF
- Set up DKIM
- Roll out DMARC none → quarantine → reject
- Monitor reports
Common mistakes
- Only SPF without DKIM/DMARC
- No DMARC policy
- Ignoring reports
Stop domain spoofing — freeNo card required — free forever up to 10 mailboxes.