Spam, spoofing and DMARC: protect your brand’s email

If customers receive fake invoices “from” your domain, the damage hits trust first and inboxes second. Authentication records are how you fight back.

Start simple, then tighten

• Publish SPF that lists only your real senders.
• Enable DKIM at the mailbox provider.
• Add DMARC at p=none with reporting, then move to quarantine/reject when reports look clean.

Host Cloud email setups include the building blocks. If you also send from CRMs or accounting tools, those services must be listed in SPF — otherwise legitimate mail fails.

Reading DMARC reports

Early reports look noisy. Sort by source IP and SPF/DKIM alignment. Legitimate tools that fail alignment need SPF includes or DKIM signing — not an immediate reject policy.

Customer communications

If spoofing already happened, tell customers what you are doing (DMARC, verified domains) and which channels you will use for invoices. Silence leaves the attacker’s story unchallenged.

What this means day to day

Good infrastructure decisions show up in ordinary moments: a page that opens on a phone in traffic, an invoice that lands in the inbox instead of spam, a restore that takes minutes instead of an afternoon of guesswork. That is the standard we aim for at Host Cloud.

How we work with you

Phone support is available Monday to Friday, 9:00–17:00. Email and live chat run 24/7. When you open a ticket, send the domain name, what changed recently, and a screenshot or error text — it cuts diagnosis time sharply.

Next steps

If you want a second pair of eyes on your current setup, contact Host Cloud with your domain and goals. We will tell you what is already fine, what should move, and what can wait.