Understand the records before changing them.
Plain-English guides to email checks, their limits and separate payment verification.
Choose by task: understand business email identity, inventory senders before changes, or verify a payment change. A domain check does not answer all three questions.
Start here
Email authentication
What is SPF, and why does adding a second record cause trouble?
Understand SPF's narrow job, the single-policy rule, and the questions to ask before changing your authorized senders.
Read guide →Email authenticationWhat does a DKIM signature prove about an email?
Learn what DKIM signs, why a DNS key is not the whole check, and how to request useful verification without sharing secrets.
Read guide →Email authenticationDMARC none, quarantine, and reject: what changes between them?
Read a DMARC finding without mistaking a monitoring policy for a breach or an enforcement policy for complete protection.
Read guide →Your email provider
We use Microsoft 365. What still needs checking on our domain?
A business-owner checklist for custom-domain authentication, third-party senders, and evidence beyond a working Outlook inbox.
Read guide →Your email providerWe use Google Workspace. Is our business email already authenticated?
Find out what to ask about Workspace signing, public DNS, and the tools that send outside Gmail.
Read guide →Industry guides
How can a real estate team make email trust easier for clients?
Create a clear communication agreement before a transaction becomes urgent, while keeping domain checks and payment approval separate.
Read guide →Industry guidesWhat should a mortgage team clarify before sending closing-related email?
Give borrowers clear document and verification routes without suggesting that an email domain check validates a closing payment.
Read guide →Industry guidesWhich email trust gaps should an independent insurance agency review?
Map the agency's senders and customer-request channels while keeping authentication, account security, and compliance responsibilities distinct.
Read guide →Practical safeguards
How should a business verify a payment-change request?
Use a separate, established verification route and a clear approval record before changing where business money goes.
Read guide →Practical safeguardsHow do you build an inventory of everything sending your business email?
A practical way to identify the services behind customer messages before changing SPF, DKIM, or DMARC.
Read guide →Service and scope
Start with your domain's public records.
Check public SPF, DMARC and MX records and selected website signals—not every sender or real message. Review results with your administrator before changing DNS.
Need help with the next step?