Email Security and Phishing Protection
Email Security and Phishing Protection
EMAIL SECURITY AND PHISHING PROTECTION
Email is still the easiest way into a business. One convincing message can lead to a stolen password or a wire sent to the wrong account. We stack filtering, domain protection, login security and staff habits so fewer bad messages arrive and the ones that do get caught.
- Filtering ahead of Microsoft 365 or Google Workspace
- SPF, DKIM and DMARC set up on your domains
- Staff trained to slow down and verify
THE EMAIL ATTACKS WE SEE MOST
CHANGED BANK DETAILS
A real-looking vendor email asks you to update their payment account. The money goes to a criminal.
FAKE LOGIN PAGES
A shared document link leads to a page that steals Microsoft 365 passwords.
BOSS IMPERSONATION
A message from the owner asks for gift cards or an urgent transfer.
SPOOFED DOMAINS
Criminals send mail that looks like it came from your own domain.
THE LAYERS WE PUT IN PLACE
FILTERING
Proofpoint filtering with link checks at click time and attachment scanning.
DOMAIN PROTECTION
SPF, DKIM and DMARC so others cannot easily send as you.
ACCOUNT SECURITY
MFA, Conditional Access and Huntress login monitoring on every mailbox.
HABITS
Training, phishing tests and a call-back rule for any payment change.
No filter catches everything. The call-back rule, where staff phone a known number before changing payment details, stops the most expensive scams.
A WARNING TO PUT ON YOUR OWN INVOICES
Tell your customers in writing that you will never change bank details by email, and that they should call a number they already have. We give clients ready-to-use wording for invoices, quotes and email signatures.
- Invoice and quote footer wording
- Email signature line
- Newsletter paragraph for customers
- Internal payment change policy
IF SOMEONE CLICKED
01
REPORT
Staff tell us right away. No blame.
02
RESET
We reset the password, revoke sessions and check MFA.
03
SEARCH
We look for inbox rules, forwarded mail and sent phishing.
04
WARN
We help notify contacts if your account sent bad mail.
WHO GETS TARGETED
FINANCE STAFF
Anyone who can pay bills or change vendors.
OWNERS
Used as the name in fake requests.
HR
Payroll direct deposit change scams.
PROJECT MANAGERS
Fake change orders and subcontractor invoices.
QUICK ANSWERS
It catches a lot. Adding a dedicated filter, DMARC and login monitoring catches more, and training covers what slips through.
A DNS record that tells receiving mail servers what to do with mail that claims to be from your domain but fails checks.
Sometimes at first. We tune it in the first weeks and staff can release messages from a digest.
Monthly short tests and training work better than one long session a year.
CHECK YOUR EMAIL DEFENSES
We will review your filtering, DMARC and MFA and send you a short list of fixes.
Or call 717-516-0600
