Eastern Massachusetts, Rhode Island, and Charlotte, NC
Free email security check: Can someone send email pretending to be your company?
Check your company’s email
We read your domain’s public DNS records. We never log in to your mailbox or read your messages.
The check is loading. If it doesn’t appear, call 774-222-5500.
Your results appear right here, with a link you can save. We never rent or share your address.
Enter your work email. In seconds, you’ll see whether a stranger could send email that looks like it came from you, and whether your own email is set up to be trusted. Plain English, right on this page, no account needed.
- Checks DMARC, SPF, DKIM and your subdomains
- Results on screen in plain English, plus a free fix guide
- From Fairoaks IT, serving businesses since 1991
Questions? Call 774-222-5500.
- Since 1991 Owner-led IT and cybersecurity for businesses in Eastern Massachusetts, Rhode Island, and Charlotte, NC
- Soteria Award Most Trusted MSP in North America, 2024 (MSP Titans of the Industry)
- In-house help desk Not outsourced. Our technicians have 5 to 10 years of experience.
What the check looks at
Four records decide whether criminals can send email as your company. Most small businesses have never had them reviewed, and gaps don’t show from the inside. Your email keeps working, so nothing looks wrong.
-
DMARC: are fakes actually blocked?
DMARC tells receiving mail servers what to do with a message that claims to be from you but fails the checks. Many businesses have it set to “monitor only,” which reports the fakes and still lets them through.
-
SPF: is your approved-sender list working?
SPF lists the services allowed to send as your domain, like Microsoft 365 or your accounting software. Publish two SPF records, or one that needs more than ten DNS lookups, and it quietly stops working.
-
DKIM: is your email signed?
DKIM adds a digital signature that proves a message came from you and wasn’t changed along the way. We look for the signing keys the common email platforms publish.
-
Subdomains: is there a side door?
Your main domain can be locked down while names like mail.yourcompany.com are left wide open. We check a short list of the common ones.
Also measured, not scored: MTA-STS, which asks other mail servers to encrypt email on its way to you, and DNSSEC, which protects your DNS answers from being forged.
What a result looks like
An illustration, not a real company’s result.
Sample result for example.com
50 / 100
Needs attention
The short version
Nothing tells other mail servers to block fake email from example.com.
SPF and DKIM are in place. Without a DMARC policy, though, receiving servers decide on their own what to do with a fake, and many let it through.
-
DMARC
No policy found
0 of 40
-
SPF
Pass
25 of 25
-
DKIM
Pass
25 of 25
-
Subdomains
No policy found
0 of 10
Safe next step: Publish a DMARC record in monitor mode, confirm every service that sends email as you, then move to blocking. Skip the middle step and your real invoices can start bouncing.
Why this matters
Business email compromise, where criminals pose as a boss, a vendor or a client to redirect money, accounted for $3.05 billion in reported losses in 2025, according to the FBI’s Internet Crime Complaint Center.
Source: FBI IC3 2025 Internet Crime Report, which counted 24,768 business email compromise complaints and $3.05 billion in reported losses.
Gaps in these records make it easier to:
- send your customers a fake invoice from your real address
- email your bookkeeper a wire-change request that looks like it came from you
- send your staff a password-reset message that looks like it came from inside the company
They affect your real email, too. Google, Yahoo and Microsoft now require SPF, DKIM and DMARC from bulk senders, and email without them gets less benefit of the doubt.
These records are one layer
Locked-down records stop criminals from sending email as your exact domain. They don’t stop a look-alike domain, a hacked mailbox or an employee who clicks the wrong link. Those take filtering, monitoring and training.
How Fairoaks IT helps
- Set up SPF, DKIM and DMARC in an order that keeps your real email flowing
- Microsoft 365 and Google Workspace threat detection and response
- Security awareness training and phishing simulations for your team
- DNS protection that blocks known malicious websites
Managed security services from Fairoaks IT
“It is a mean world out there in all respects, and Fairoaks IT have diligently kept us informed and trained to avoid click bait and phishing emails.”
Rob English Owner, Chemical Solutions
CEO, Fairoaks IT
Go over your results with Adam
Book 15 minutes and we’ll walk through what your check found, what to fix first and what’s safe to leave alone. You’ll leave with a plan whether or not you ever work with us.
Adam Crossley is CEO of Fairoaks IT and leads sales for our Massachusetts and Charlotte, NC offices. Fairoaks IT was founded in 1991 by Tom Crossley and is led today by Tom Crossley and CEO Adam Crossley. Adam’s books include Cyberattack: How to Defend Your Business and Protect Your Bottom Line, Cybersecurity: The Silent Battlefield and The Compliance Formula: Successful Strategies of CMMC Compliant Companies, and he has been featured in MSP Success Magazine.
Common questions
Does the email security check read my email?
No. The check reads only public DNS records, the same ones every mail server on the internet looks up before it delivers your email. It never logs in to your mailbox or sees a single message.
Why do you ask for my work email?
Your work email tells us which domain to check. Your results appear right here, with a link you can save. We never rent or share your address. Personal addresses like Gmail or Outlook.com won’t work, because those domains belong to Google and Microsoft, not to your company.
What are SPF, DKIM and DMARC?
They’re three DNS records that tell the world which email really comes from your company. SPF lists the services allowed to send as you, DKIM signs your messages, and DMARC tells receiving servers what to do with email that fails those checks.
What does the score mean?
The score shows how much of your email authentication is in place, out of 100 points. DMARC counts for 40 points, SPF and DKIM for 25 each, and subdomains for 10. It measures published settings. It doesn’t tell you whether you’ve been breached.
Can I fix this myself?
Yes, if you’re comfortable editing DNS, and the free fix guide lays out the steps in a safe order. The risk is moving too fast: turn on DMARC blocking before every service that sends as you is set up, and your real invoices and newsletters can start bouncing.
My IT company handles our email. Should I still check?
Yes. It takes seconds and gives you something specific to ask about. If the results show gaps, ask your provider why, or bring them to a 15-minute call and we’ll go through them with you.
What areas does Fairoaks IT serve?
Fairoaks IT serves Eastern Massachusetts, Rhode Island, and Charlotte, NC. The email security check itself works for any company domain.
Find out where you stand
Run the free check, then book 15 minutes with Adam if you want a second set of eyes on the results.
