Someone poses as you to your clients

A domain almost identical to yours, a fake profile or a copied website is used to trick your clients and suppliers in your name. They lose the money, but you lose the trust.

Threat map

How it happens

1
The copy
They register a similar domain (one letter changed, another ending) or create a fake profile or site.
2
The scam
They write to your clients or suppliers with invoices, account changes or offers in your name.
3
The damage
Clients pay the wrong people and then hold you responsible.

How to spot it

Clients asking about emails or invoices you didn't send
Domains or profiles very similar to yours
Bounced emails you never sent
Your domain doesn't have DMARC set up

How to protect yourself

Set up SPF, DKIM and DMARC so nobody can send email as you
Watch for registrations of domains similar to yours
Tell clients how you communicate account changes
Register the most obvious variants of your domain

If it has already happened

Warn clients and suppliers that fake messages are circulating, ask the registrar or the social network to take down the domain or profile, and report it to the police.

How we help

Audit
We check whether this door is open in your company and how to close it.

Other threats through this door

See all threats

Next step

How many of these risks does your company have right now?

Take the cybersecurity test and discover your exposure level in 3 minutes. You'll get your score with the highest-risk areas, no sign-up required.

Take the cybersecurity test

Free · No sign-up · 3 minutes