Email Spoofing — DMARC, SPF, DKIM

In short

What is email spoofing?

What it is

It is the forgery of an email's sender address to pass it off as a legitimate origin. Because SMTP was designed without authentication, anyone can put your domain in the 'From:' field without permission, unless controls are in place to prevent it.

How it works

SPF declares which servers may send for your domain; DKIM signs the message cryptographically; and DMARC tells the receiver what to do if SPF or DKIM do not align with the 'From:' domain — quarantine or reject — and sends you reports of every attempt.

Who it's for

Companies whose name or brand can be used to deceive: banking, retail, insurers, government and any organization that communicates by email with clients, suppliers or staff across Latin America.

What problem it solves

It prevents your domain from being used for phishing and fraud in your name. With DMARC set to reject, spoofed emails never reach the victim's inbox, protecting your brand and those who trust it.

Capabilities

Authentication verified, not assumed

SPF checkValidation of the record, lookup limits and errors.

DKIM signingVerification of selectors and published keys.

DMARC policyReading of aggregate reports and the policy state.

Continuous monitoringWebMon alerts on spoofing attempts and changes.

Why it matters

What your operation gains

Your domain stops being a vehicle for fraud in your name.
DMARC reports that reveal who tries to spoof you and from where.
Better deliverability of legitimate mail by authenticating properly.
A foundation for MTA-STS and a complete email posture with WebMon.

FAQ

Frequently asked questions

Why does SMTP allow spoofing?

SMTP was designed in the 1980s without sender authentication, so the 'From:' field can be written freely. SPF, DKIM and DMARC are the layers added later to validate the origin.

Does DMARC alone stop spoofing?

DMARC needs SPF or DKIM to work: it defines what to do when authentication does not align with the 'From:' domain. In a reject policy, spoofed emails are discarded before reaching the recipient.

Does spoofing affect my deliverability?

Yes. A frequently spoofed domain builds up negative reputation, and without proper authentication your legitimate mail may land in spam. A well-configured DMARC protects both brand and deliverability.

How does WebMon help against spoofing?

WebMon continuously monitors your SPF, DKIM and DMARC records, processes aggregate reports and alerts you to spoofing attempts or any change that weakens your authentication.

Email spoofing: when the sender is your domain, but it isn't you.