Can someone send an invoice as you?
Four public records decide it. Most business domains we check leave the door open. Yours takes about five seconds to read.
Why it matters
Delivered is not the same as trusted
- Failing mail does not bounce, it goes to spam. Which is worse, because nothing tells you it happened. Quotes, invoices and password resets quietly stop landing, and the first you hear is a client saying they never got anything.
- Without DMARC, anyone can invoice as you. They put your domain in the From line and their own bank details in the body, and the recipient sees your name. This is the commonest way small businesses lose money to fraud, and the fix is a DNS record.
- We learned this on our own domain. Authentication was not the headline problem: SPF aligned, a DKIM key was published, MX was correct, and mail was still filed as spam because the policy said to do nothing about failures and nobody was collecting the reports. The tool above checks the same four things.
Next step
We can fix these, usually in a day.
They are DNS changes rather than a rebuild, and they come as part of any web or SEO work we do. If that is all you need, it is all you pay for.