Impersonation protection

Impersonation (or "BEC" — business email compromise) attacks don't need spammy wording: someone simply writes as your CEO, or from a domain that looks like yours, and asks for a payment. Impersonation protection catches exactly that.

What it protects, on every plan

Your own protected domains are covered automatically:

• Domain spoofing — mail claiming to come from one of your domains that fails SPF/DKIM/DMARC is treated as a spoof.
• Look-alike domains — sending domains that are one small step away from yours, or that mix scripts to imitate them (homoglyphs, e.g. a Cyrillic "а"), are caught.

Open Impersonation protection in the dashboard to see your protected domains and to switch the feature on or off (owner only). It's on by default.

VIPs and partner domains (Pro & Enterprise)

On Pro and Enterprise you can additionally protect:

• Protected people (VIPs) — add a person's full name and their real email address(es). Mail whose display name matches that person but comes from any other address is flagged; from a free mailbox (Gmail, Outlook.com, …) or when authentication fails, it's quarantined outright. Names are matched case-insensitively and ignoring accents, so "Gabor Lepsenyi" still matches "Gábor Lepsényi".
• Protected partner domains — domains of suppliers, clients or your accountant. They then get the same spoof and look-alike protection as your own domains.

Add or remove entries at any time; changes take effect within about 5 minutes.

What happens to a flagged message

Impersonation signals feed the normal spam score, and the strongest ones (authenticated-domain spoof, homoglyph look-alike, a VIP "sent" from a free mailbox) force the message into quarantine regardless of the rest of the score. You'll see the reason on the message in the Quarantine view, and you can release it like any other held mail.

If a genuine sender keeps getting caught — a VIP writing from a personal address, for example — add that address to the VIP's real addresses, or allow-list the sender. See Allow & block lists.