Find out in 5 seconds whether scammers can send emails that look like they come from your domain – and how to fix it.
🎁 Your first website check is free – every security tool works on it. Need unlimited checks? Go Pro
🔒 We only read public DNS records. Nothing about your email account is accessed.
How to use the email spoofing checker
- Enter your domain (or any email address).
- Read the verdict and the SPF and DMARC results.
- Follow the suggested fix to block spoofed email.
What is email spoofing?
Spoofing is when a scammer sends an email with your address in the "From" line. Without SPF and an enforced DMARC policy, many inboxes deliver those fake emails to your customers and staff.
How to fix it
Publish an SPF record listing your email providers, enable DKIM signing, then add a DMARC record. Start with p=none to monitor, and move to p=quarantine or p=reject once legitimate mail passes.
Frequently asked questions
What is a good DMARC policy?
p=reject is the strongest, p=quarantine is good. p=none only monitors and does not stop spoofed email.
Do I need SPF and DMARC?
Yes. Gmail and Yahoo now require them for bulk senders, and they are the main defence against your domain being used in phishing.
Is this check safe to run?
Yes. It only reads public DNS records, the same information any mail server sees.