Business email basics
Can someone fake an email from your domain?
DMARC and SPF are public rules that help email providers tell real messages from messages pretending to be yours.
Check your domain freeThe problem
A sender can type your address in the From line.
The visible address is not proof that a message came from your business. Receiving email providers look for public instructions that describe which messages to trust.
DMARC
Tell providers what to do with unverified messages.
DMARC is the rule for messages that claim to use your domain but cannot be verified. It can tell a provider to monitor, quarantine, or reject those messages.
SPF
List the services allowed to send for you.
SPF is the public list of email services that may send messages for your domain. Each service you use needs to be accounted for in that list.
Your first step
See what your domain publishes today.
Use Taverlo’s free check to see whether DMARC and SPF are present and readable. The result explains what it found and what to review next.
Run the free checkKeep the decision clear
A public-record check is a starting point.
- CheckTaverlo reads public DMARC and SPF records.
- ReviewUse the finding with whoever manages your email or domain.
- Stay awareTry monitoring free when you need to know if the answer changes.