EMAIL SECURITY CHECK
Is Your Domain Protected From Email Spoofing?
Check whether your business domain has the key email-security protections used to reduce spoofing, impersonation, phishing, and fraudulent email.
The check is quick and does not require access to your Microsoft 365 account or email.
CHECK YOUR DOMAIN
Review Your Email-Security Records
Enter your company domain below to review the email-security records that help other mail systems verify whether messages claiming to come from your business are legitimate.
A clean result is an important security signal, but it does not guarantee protection from every phishing or email-security threat.
EMAIL AUTHENTICATION
What Are We Checking?
SPF
Helps identify which mail servers are authorized to send email for your domain.
DKIM
Adds a digital signature that helps receiving mail systems verify that a message was not altered and was sent by an authorized system.
DMARC
Tells receiving mail systems how to handle messages that fail authentication and provides stronger protection against domain impersonation.
WHY IT MATTERS
Why Email Authentication Matters
Cybercriminals often impersonate trusted businesses to trick employees, customers, and vendors into sending money, sharing credentials, or opening malicious links. Properly configured SPF, DKIM, and DMARC make it harder for attackers to successfully spoof your company’s domain.
Concerned about fake invoices, executive impersonation, or vendor payment fraud?
See our guide to Business Email Compromise and Invoice Fraud.
- Reduce the risk of domain spoofing
- Improve trust in legitimate business email
- Identify gaps before attackers take advantage of them
UNDERSTANDING THE RESULTS
What If the Check Finds a Problem?
A failed or incomplete result does not necessarily mean your email has been compromised. It means one or more protections may be missing, incomplete, or incorrectly configured.
If you are unsure what the results mean, PCC can review the findings with you and help determine whether changes are needed.
CONTINUE LEARNING
More Microsoft Security Resources
Microsoft Security Learning Center
Explore PCC’s practical Microsoft security guidance.
Microsoft 365 Security Checklist
Review essential protections for your Microsoft 365 environment.
Microsoft Account & Support Scams
Learn how to recognize fake Microsoft support activity.
Microsoft Teams Scams
Recognize fake IT-support messages and calls in Teams.
Phishing & Social Engineering
Learn how attackers manipulate employees into unsafe actions.