Free email spoofing check

Can someone send emails pretending to be you?

Fake invoices and “we’ve changed our bank details” emails work because most small businesses never told the world’s mail systems to reject email that isn’t really from them. Type your business email address and see where yours stands in a few seconds.

Check my email
  • Free, instant, nothing to install
  • Reads public records only
  • £99 to fix, agreed first

Check your email

Type your business email or domain

Only the part after the @ is checked. The check reads your domain’s public DNS records, which every mail system reads anyway. It never touches your mailbox.

Why it matters

The scam this stops

  • A criminal sends your customer an email that looks exactly like it came from you: your name, your address, a real-looking invoice with new bank details.
  • Without DMARC, your customer’s mail system has no instruction to block it, so it lands in their inbox.
  • Your customer pays the criminal. You don’t get paid, and they blame you.
  • With SPF, DKIM and DMARC set properly, that email is rejected before anyone sees it.
  • Google, Yahoo and Microsoft now expect these records from businesses, so setting them also helps your genuine emails avoid junk folders.
  • In a check of 61 Milton Keynes businesses in November 2026, 54 weren’t telling mail systems to reject fake email.

Email is what people come to Harrison for

Two of his Google reviews, both about email

“I needed a tailored email solution for my microbusiness … He responded promptly, listened carefully, answered my questions and came up with a solution that actually fitted my requirements … and charged a very reasonable price, with no surprises.”

John Clifford · Google review, October 2026

“I called Harrison because I had a long-standing issue with my emails and Harrison solved the problem for me. He was professional, patient and polite …”

Debbie Hatton · Google reviewRated 5.0 on Google, read them all

What Harrison does

Locked down without breaking anything

  1. List what sends your email

    Your mailbox, website forms, invoicing, newsletters and anything else, so none of your genuine email gets blocked.

  2. Set the three records

    SPF, DKIM and DMARC, set up in Microsoft 365 or Google Workspace and at whoever holds your domain.

  3. Tighten and confirm

    Starts gently, watches the reports, then switches to reject, and sends you a one-page summary of what changed.

Questions

Answers before you get in touch

Is the check safe?

Yes. It only reads your domain’s public DNS records, the same ones every mail system in the world reads when you send an email. It never connects to your mail server or your mailbox.

What are SPF, DKIM and DMARC?

SPF is the list of who may send email for your domain. DKIM is a digital signature on your genuine emails. DMARC tells other mail systems what to do with emails that fail those checks: deliver them, send them to junk, or reject them.

Does a red result mean I’ve been hacked?

No. It means the door isn’t locked, not that anyone has come in. It’s usually a small settings job nobody ever told you about.

Will fixing it stop my own emails arriving?

Not if it’s done in the right order. Harrison checks every service that sends email for you (your mailbox, website forms, invoicing, newsletters) before tightening anything, then watches the reports.

How much does it cost?

The check is free. The fix is £99 for one email domain, done remotely, and agreed with you before anything starts.

Rather just ask?

Chat with Harrison now, or tell him your domain and he’ll check it and explain what he finds, before any paid work.

  • ICO registered
  • Registered company in England and Wales
  • No charge for an enquiry