Scammers can send email using your company's address

See in seconds whether your company's domain is protected against sender spoofing. Free, no sign-up.

What comes after the @ in the company's email, for example: yourcompany.com.br.

We do not store the domain you type, the result or your IP address. We only read public DNS records, through Cloudflare's public DNS, from our server.

The problem: email using your company's address

Anyone can send an email that claims to come from finance@yourcompany.com.br. Without the right settings on the domain, the recipient's provider cannot tell real email from fake. This is sender spoofing.

  • Fake boleto

    The customer receives a boleto (a Brazilian payment slip) “from the company” with another payee's details.

  • Bank details change

    A supplier receives a request to pay the next invoice into a new account.

  • Fake customer service by email

    A customer who complained receives a “reply from customer service” asking for data or a Pix payment.

When the customer has already paid, see what the company does: A customer paid the fake customer service: what the company does about Pix and the MED

How we do it

  1. Diagnosis

    We map who sends email on behalf of the domain: the company's server, the billing system, the marketing tool.

  2. Gradual rollout

    First DMARC only monitors, then it sends to quarantine and, finally, it blocks. Each step comes after confirming that legitimate email still arrives.

  3. Monitoring

    We read the DMARC reports, show who tried to use the domain and adjust the settings.

  4. Logo in the inbox

    With DMARC blocking, we prepare BIMI so the brand's logo appears next to the emails.

The work is done with a specialized platform. There is no fixed timeline: the pace depends on how many services send email for the company. The protection greatly reduces misuse of the domain, but it does not stop every email scam, such as those using lookalike domains.

BIMI: the brand's logo in the inbox

With BIMI, the brand's logo appears next to the company's emails on providers that support it. For that, DMARC must be at quarantine or reject.

The main path is the Verified Mark Certificate (VMC), which requires a registered trademark. That is why registration at INPI (Brazil's trademark office) and the Patentiq diagnosis are part of the path.

The certificate (VMC or CMC) is issued by a partner certificate authority. Patentiq prepares BIMI and follows the issuance.

For a brand not yet registered, there is the CMC certificate, which requires the logo to have been in public use for at least one year.

In Gmail, the verified checkmark appears only with a VMC; with a CMC, the logo appears without the checkmark. Not every provider shows the logo (Outlook, for example, does not). The certificate is valid for about one year and is renewed every year.

Why with Patentiq

  • The same team that monitors your brand. Whoever takes care of your email is the same team that looks for domains and profiles similar to your brand.
  • A single report. Email, domains, profiles and images in the same monitoring.
  • Support on the trademark side. Registration at INPI and support in obtaining the mark certificate for the logo in email, with legal support.

Protect your company's email

Tell us how the company sends email today. A specialist will reply with the diagnosis and the next steps.

Talk to a specialist