Email Spoofing

Email spoofing is the practice of making an email appear to come from a sender or domain other than the true source. A fraudulent message might imitate a handyman business and request payment to a new bank account. Spoofing can be part of phishing or business email compromise, but it does not always mean the genuine business mailbox was accessed. Technical controls such as SPF, DKIM, and DMARC can help receiving systems assess sender identity when configured properly. They are not complete fraud prevention measures. Customers and staff should independently verify unexpected payment or credential requests using trusted contact details, not the contact information inside the suspicious message.