Email and trust
DMARC
With SPF and DKIM, the records that stop email being faked in your name.
What is DMARC?
DMARC is a public record on a domain that tells receiving mail servers what to do with email claiming to come from that domain when it fails the two checks beneath it: SPF, a list of servers allowed to send, and DKIM, a signature on every genuine message. Without DMARC, anyone can send email as the business and most inboxes deliver it.
What it means for a small service business
The common fraud is a fake invoice with new bank details, sent to your customers in your name. It needs no password, only a missing record. Most small firms have DMARC missing or set to "none", which means monitor only.
Does your business need to do anything about DMARC?
Yes. It is free, takes twenty minutes at your email provider, and the checker tells you exactly what is missing.
See also
Act on it
The tools and guides that deal with DMARC on this website, then the free review if you want it looked at properly.
Check whether anyone can send email as your business →Get your free review