Published in accordance with the Electronic Commerce (EC Directive) Regulations 2002 and the Provision of Services Regulations 2009.
Email is the working channel for everything, including complaints, and it is answered within one working day.
A written assessment of the publicly published email-authentication records (SPF, DKIM and DMARC) for a domain you own or are authorised to act for, and, where that is bought, assistance in changing those records with your existing providers.
This is not penetration testing, vulnerability scanning or any form of system access. No system is probed, logged into or tested. The free check uses only public DNS information, which anyone in the world can look up without permission.
Work that involves changing your records is carried out only on your instruction and using your own provider accounts. Nothing is transferred away from you.
It is not legal advice, and it is not advice on a specific fraud loss or a claim. If money has already gone, the people to speak to are your bank and Action Fraud.
Correct email authentication makes it substantially harder to send mail that appears to come from your domain. It does not prevent every form of impersonation, including messages sent from lookalike domains or from compromised accounts, and it is not a guarantee against fraud. No assessment of this kind can be one.
The full notice, including your rights and the one-month clock on a request, is on the privacy page.
The free check on the front page runs in your own browser. The domain you type is sent to Cloudflare's public DNS resolver to read published records, exactly as any mail server would. It is not sent here, and nothing about the check is recorded.
If you ask for a paid check, the domain name and the email address you write from are held for the purpose of replying and providing the service, and for as long as ordinary business records require. They are not sold, shared or used for any other purpose. To have them deleted, reply to any email and say so.
Monthly monitoring reads DMARC aggregate reports, which describe sending servers and authentication results. They do not contain the content of any message.
Where an introductory email has been sent to a corporate subscriber, any reply saying no further contact is wanted is acted on immediately and permanently.
Reports and fixes are invoiced on completion, or paid up front through the buttons on the front page. The monthly monitoring option can be cancelled at any time, with no notice period and no further charge after the month in progress.
Raise anything you are unhappy with by email and it will be answered within five working days. The full terms, including the refund position on late delivery, are in the terms of service.