Free tool

Can someone send email
pretending to be you?

For most small businesses the answer is yes, and they have no idea. Type your domain — nothing private, nothing you have to sign up for — and find out in about four seconds.

A domain name is public information — it is already on your van and your business cards. This reads the same DNS records any mail server in the world reads before deciding whether to trust a message from you. Nothing is sent to us and nothing is stored.

Or try one:

How the scam actually works

Nobody hacks you. They just use your name.

  1. They email your customer with your business name and your address in the From line. Writing that takes seconds and needs no access to anything of yours.

  2. Your customer’s mail server checks your settings to see whether it should refuse the message. If you have not set the rule, there is nothing to check.

  3. It lands in the inbox looking normal. Usually an invoice with different bank details. Your customer pays it, and they blame you — your computers were never touched.

Everything this page did was a public lookup, run from your browser, on a domain you own. You can reproduce all of it from a terminal with dig. This site runs no analytics, so nothing you typed here was recorded anywhere.

Need a hand?

We’ll lock it down with you.

Email records, account logins, two-factor, backups, and what actually happens on the day something gets through — gone through with you, in plain language, usually in a single session.