{"id":6853,"date":"2021-04-15T07:18:34","date_gmt":"2021-04-15T15:18:34","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/blog\/?p=6853"},"modified":"2021-04-15T08:16:46","modified_gmt":"2021-04-15T16:16:46","slug":"what-is-email-spoofing-an-explanation","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/","title":{"rendered":"What Is Email Spoofing? An Explanation"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">The <a href=\"https:\/\/www.ic3.gov\/Media\/PDF\/AnnualReport\/2020_IC3Report.pdf\">FBI\u2019s Internet Crime Complaint Center<\/a> (IC3) received an average of 2,000 cybercrime complaints per day with reported losses topping $4.1 billion in 2020. $216.51 million of these losses were the result of email spoofing. So, what is email spoofing? Let\u2019s learn more about it.<\/h2>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"alignright size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fbi-quote.png\" alt=\"A graphic that contains the FBI seal and a quote from Section Chief Steven Merrill. \" class=\"wp-image-6860\" width=\"382\" height=\"394\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fbi-quote.png 642w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fbi-quote-290x300.png 290w\" sizes=\"(max-width: 382px) 100vw, 382px\" \/><figcaption>Quote source: FBI <a href=\"https:\/\/www.ic3.gov\/Media\/PDF\/AnnualReport\/2020_IC3Report.pdf\">IC3&#8217;s 2020 Internet Crime Report<\/a><\/figcaption><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">One of the most common tactics cybercriminals use to trick or manipulate people is email spoofing. Spoofing means presenting something or someone as another legitimate entity to establish authority and gain leverage. The eventual goal of spoofing is often to dupe victims for financial gain. Of course, spoofing can occur through multiple means: emails, phone calls, SMS text messages, domain spoofing, and even app spoofing. But the one we\u2019re going to focus on here today is email spoofing specifically.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The number of spoofing email attacks is increasing every year, causing irreparable damage to victims. The IC3 observed that emails spoofed, which makes emails look like they came from CFO, CEO, lawyers, or vendors, is frequently used to target business enterprises. It\u2019s a tactic that\u2019s commonly used in business email compromise (BEC) scams. Data from the IC3\u2019s 2020 Internet Crime Report shows that BEC scams had a huge impact with 19,369 complaints resulting in $1.8 billion in total adjusted losses.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Considering these numbers and how fraudulent emails can affect businesses, it\u2019s crucial that you understand email spoofing and take appropriate steps to prevent this tactic from being successfully used against your organization. Let\u2019s break it all down.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Is Email Spoofing?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When someone uses email to fraudulently represent themselves as another legitimate entity, this is an example of email spoofing. In a more technical sense, email spoofing about fabricating false email sender information to trick people into believing fraudulent emails are authentic.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here\u2019s a great video that quickly explains email spoofing:<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe title=\"What is Email Spoofing? Spoofing Email Explained\" width=\"770\" height=\"433\" src=\"https:\/\/www.youtube.com\/embed\/qdp_ormFCu8?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">On February 10, 2021, <a href=\"https:\/\/www.irs.gov\/newsroom\/irs-summit-partners-issue-urgent-efin-scam-alert-to-tax-professionals\">the IRS (Internal Revenue Services)<\/a> released an official warning to alert tax professionals about a scam targeting them. The spoofing emails were supposedly sent from &#8220;IRS Tax E-Filing&#8221; and carried the subject line &#8220;Verifying your EFIN before e-filing.&#8221; The IRS also warns not to take any steps mentioned in the email especially responding to the said email.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here\u2019s an excerpt from one of these dodgy emails:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cIn order to help protect both you and your clients from unauthorized\/fraudulent activities, the IRS requires that you verify all authorized e-file originators prior to transmitting returns through our system. That means we need your EFIN (e-file identification number) verification and Driver&#8217;s license before you e-file.<\/em><\/p><p><em>Please have a current PDF copy or image of your EFIN acceptance letter (5880C Letter dated within the last 12 months) or a copy of your IRS EFIN Application Summary, found at your e-Services account at IRS.gov, and Front and Back of Driver&#8217;s License emailed in order to complete the verification process. Email: (fake email address)<\/em><\/p><p><em>If your EFIN is not verified by our system, your ability to e-file will be disabled until you provide documentation showing your credentials are in good standing to e-file with the IRS.\u201d<\/em><\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">This is a textbook example of a phishing email. Some of the <a href=\"https:\/\/cheapsslsecurity.com\/blog\/how-to-tell-if-an-email-is-fake-or-real\/\">red flags that tell you the email is fraudulent<\/a> are:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>The email address of the sender is spoofed.<\/li><li>It uses urgent language to push you to take rash actions.<\/li><li>The \u201creply to\u201d email address is different from the sender\u2019s email address.<\/li><li>It threatens you with penalties if you do not take immediate action.<\/li><li>The email claims to be from IRS but asks for information (and sometimes copies of documents) that the IRS would already possess.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Of course, we&#8217;ve already written an article that covers <a href=\"https:\/\/cheapsslsecurity.com\/blog\/how-to-tell-if-an-email-is-fake-or-real\/\">how to tell if an email is fake or real<\/a> and invite you to check that one out as well for additional information. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Does Email Spoofing Work?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">There are multiple ways that cybercriminals can spoof emails.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Spoofing the Sender\u2019s Display Name<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This is the most basic and most common form of email spoofing. It requires the sender to merely change their email display name. On a cursory glance, the recipient will believe that the email is from a legitimate sender. However, if they check the sender\u2019s email address, the scam will fall apart as the email address won\u2019t match the sender\u2019s name or company.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"888\" height=\"663\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/american-express-email-spoofing.png\" alt=\"A screenshot of a fraudulent email spoofing American Express\" class=\"wp-image-6856\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/american-express-email-spoofing.png 888w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/american-express-email-spoofing-300x224.png 300w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/american-express-email-spoofing-768x573.png 768w\" sizes=\"(max-width: 888px) 100vw, 888px\" \/><figcaption>A screenshot of a spoofed email claiming to be from American Express, but the email address is completely different.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">This type of email spoofing is super easy and doesn\u2019t require the attacker to know any kind of computer programming to carry out this scam. Also, the popularity of this scam is rising because it\u2019s so cheap and easy to do. Bad guys will require just a few innocent victims to fall for their farce.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are a couple more examples of this type of email spoofing:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"861\" height=\"577\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fake-rackspace-email-spoofing1.png\" alt=\"A rackspace email spoofing example that uses &quot;Rackspace Security&quot; as the sender's display name\" class=\"wp-image-6857\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fake-rackspace-email-spoofing1.png 861w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fake-rackspace-email-spoofing1-300x201.png 300w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fake-rackspace-email-spoofing1-768x515.png 768w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fake-rackspace-email-spoofing1-270x180.png 270w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fake-rackspace-email-spoofing1-770x515.png 770w\" sizes=\"(max-width: 861px) 100vw, 861px\" \/><figcaption>An example of email spoofing in which the attacker is impersonating Rackspace and changes the email display name to &#8220;Rackspace Security&#8221; but uses an email address that&#8217;s clearly not affiliated with the real Rackspace.<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"813\" height=\"659\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fake-rackspace-email-spoofing2.png\" alt=\"A rackspace email spoofing example that has &quot;rackspace&quot; as the first part of the email address but is sent from an unknown domain \" class=\"wp-image-6858\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fake-rackspace-email-spoofing2.png 813w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fake-rackspace-email-spoofing2-300x243.png 300w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/fake-rackspace-email-spoofing2-768x623.png 768w\" sizes=\"(max-width: 813px) 100vw, 813px\" \/><figcaption><em>Another example of Rackspace email spoofing t<\/em>hat involves putting &#8220;rackspacesupport&#8221; at the beginning of the email address to try to make the message seem more authentic<em>.<\/em><\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">2. Spoofing the Domain Name:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Domain name spoofing involves scammers creating email addresses that are associated with domains that are similar to that of the organization they\u2019re impersonating. Much like typosquatting tactics, cybercriminals use basic tricks to make email addresses look legitimate to people who aren\u2019t paying attention or are rushing. A few examples include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Swapping \u201cin\u201d in place of the letter \u201cm,\u201d<\/li><li>Using \u201c1\u201d instead of \u201cl,\u201d<\/li><li>Replacing \u201co\u201d in place of \u201co,\u201d or<\/li><li>Adding extra numbers, characters, or words to email domains.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Suppose, for example, the name of a legitimate courier agency is Safe Express, and their domain name is safeexpress.com. If bad guys want to use email spoofing to impersonate the company to scam their clients, they can create a dodgy domain safexpress.com that looks incredibly similar and use it to send out phishing emails.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here\u2019s an example of domain spoofing using an email from Nextdoor:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"888\" height=\"620\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/email-spoofing-compilation2.png\" alt=\"A compilation of three screenshots of Nextdoor emails. The first displays only the sender's display name. The second shows the legitimate Nextdoor sender email address. The third shows an email spoofing attempt from an email that is sent from an email address at the fake domain &quot;nextdoorr.com&quot;\" class=\"wp-image-6855\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/email-spoofing-compilation2.png 888w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/email-spoofing-compilation2-300x209.png 300w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/email-spoofing-compilation2-768x536.png 768w\" sizes=\"(max-width: 888px) 100vw, 888px\" \/><figcaption>From left to right: The following paragraph will break down these example screenshots regarding a spoofed email domain.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The first image (left) shows how the email appears when you receive the email if you don\u2019t click the arrow to expand the sender\u2019s email information. The second screenshot (middle) is an example of a legitimate email from Nextdoor \u2014 notice how the email comes from an address that ends in \u201c@hs.email.nextdoor.com.\u201d The third screenshot (right) is an example of a spoofed domain that looks very convincing. There\u2019s an extra \u201cr\u201d at the end of \u201cnextdoor\u201d before the \u201c.com.\u201d<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Creating an Email Using a Genuine Domain<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Despite being a less common form of spoofing, it is perhaps the most terrifying one. The email looks like it has come from a genuine person as the domain name on the sender\u2019s address is legitimate. This vulnerability is not left open anymore as most companies use Sender Policy Framework (SPF) and Domain Key Identified Mail (DKIM) in their DNS setting to prevent any unauthorized person from using their domain name for spoofing. These protocols are explained later in the article.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Email Spoofing for BEC Scams<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Business email compromise, or BEC, is usually done by spoofing the email sender\u2019s information to look like the email has come from the CEO or the CFO of the company. This type of email scam will often involve directing the recipient to transfer a huge amount to a bank account belonging to the attacker. As the email looks like it is from the victim&#8217;s boss, the employee may comply with the directions in the email without asking many questions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Some scammers have also managed to impersonate the CEOs of enterprises to ask employees to donate to a charity. Needless to say, the said \u201ccharity\u201d here is to the bank account of the attacker.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Makes Emails Vulnerable to Spoofing?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The principal vulnerability that makes email spoofing possible is the lack of authentication in Simple Mail Transfer Protocol (SMTP). Although authentication protocols to prevent mail spoofing exist, they\u2019re not widely adopted. According to the results of a 2018 academic study, only 40% of Alexa\u2019s top 1 million domains had SPF and only 1% had DMARC. This leads to an increased risk of cyber attacks, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Phishing attacks,<\/li><li>Malware infiltration in their IT systems, and<\/li><li><a href=\"https:\/\/cheapsslsecurity.com\/blog\/what-is-ransomware-how-do-you-prevent-it\/\">Ransomware<\/a> attacks.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">How to Prevent an Email Spoofing Attack<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If the spoofing attacks are so hazardous, there should be something we can do to put a check on them, right? Email service providers like <a href=\"https:\/\/support.google.com\/a\/answer\/9275489?hl=en&amp;ref_topic=9981578\">Google\u2019s Gmail<\/a> and <a href=\"https:\/\/support.microsoft.com\/en-us\/office\/overview-of-the-junk-email-filter-5ae3ea8e-cf41-4fa0-b02a-3b96e21de089\">Microsoft\u2019s Outlook<\/a> have built-in systems that help to prevent email spam and junk emails from coming through to your inbox. The recipient is alerted to receiving potential spam or a spoofed email.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Everyone should always be vigilant before opening any emails marked as spam. Although some legitimate emails might not pass the security test and end up in the spam folder, in most cases, the email service providers are right in their threat detection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But having said that, relying on your email service provider\u2019s security measures alone is not enough. They\u2019re not perfect, after all, and spoofed emails might find a way into your inbox without their knowledge.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That being said, certain protocols exist that you can use to prevent email spoofing attacks from using your domain. And if you use these protocols as part of your email security protections, then you can curb these attacks and prevent someone from sending phishing emails on behalf of your brand and domain.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this section, we\u2019ll cover three email protocols you can implement now. We\u2019ll also share two other things you can do to add additional layers to your email security defenses. Of course, it\u2019s important to mention that they must be properly implemented and configured for these protections to do you any good. We\u2019re not going to get into the technical \u201chow-to\u201d or implementation aspect of these tools. But what we will cover is what each of these email security methods is and how it improves email security for your organization and its external recipients, too.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Sender Policy Framework (SPF)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">SPF is a protocol designed to communicate which servers or IP addresses (both internal and external) are authorized to send emails on behalf of a particular domain. This is done using domain name system (DNS) records, which basically lets recipients\u2019 email clients know the email came from you.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So as long as an email originates from one of the IP addresses included in the DNS record, it\u2019ll be viewed as OK. If the IP address comes from a different IP address that isn\u2019t in the DNS record, then it\u2019ll be blocked.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As the owner of your company\u2019s domain, you can enable SPF by creating one or more DNS TXT records. This allows you to authorize certain IP addresses to send emails on behalf of your domain while prohibiting anyone else from doing so. If a scammer sends an email from your domain name, the SPF will identify the IP address and warn the recipient\u2019s email server of a possible scam.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Domain Keys Identified Mail (DKIM)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In the simplest sense, DKIM is all about helping your domain establish trust with your recipients\u2019 email servers. Domain keys identified mail helps to prevent spoofing by applying a digital signature to email headers for all outgoing messages on a domain. This allows recipients\u2019 mail servers to detect whether messages coming from that domain are from one of its legitimate users or if the sender\u2019s information has been faked.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What DKIM doesn\u2019t do, though, is encrypt email data. However, it does ensure message integrity. It does this by using a checksum to prove to a recipient\u2019s email server that the message hasn\u2019t be altered after it was sent.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Although DKIM does not filter emails, it certainly helps to reduce your email domain\u2019s spam score. If the DKIM signature cannot be verified, the email can be sent to spam to warn the recipient.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To implement DKIM, you need to modify your server as the sender. The sender creates cryptographic public and private keys, installs them on their server, and creates a DNS TXT record that contains the public key. The outgoing messages are signed by using the private key. The recipient of the email can use the public key to verify the authenticity of the email.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Domain-Based Message Authentication, Reporting, and Conformance (DMARC)<\/h3>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"542\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/dmarc-dns-records-screenshot-1024x542.png\" alt=\"A screenshot that displays DNS records for CheapSSLsecurity.com and DMARC records.\" class=\"wp-image-6854\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/dmarc-dns-records-screenshot-1024x542.png 1024w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/dmarc-dns-records-screenshot-300x159.png 300w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/dmarc-dns-records-screenshot-768x407.png 768w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/dmarc-dns-records-screenshot.png 1088w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption>A screenshot of DNS records for CheapSSLsecurity.com that shows DMARC-related records that are on file for emails sent using that domain.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">DMARC is a protocol that informs email recipients that emails from its domain either or both SPF and DKIM to help them determine whether their messages are legitimate. This way, it knows that if the authentication passes, the email should be legitimate and the user is good to go to trust it. But if the authentication fails, it tells the recipient to reject or junk the message.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Something else that DMARC does is let the recipient\u2019s server know what the sender recommends in the event of failed authentication. As the sender, for example, you can specify if you want the recipient to:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Give no special treatment to the emails that fail authentication;<\/li><li>Send non-authenticated emails to the spam folder; &nbsp;<\/li><li>Reject such emails before they reach the recipient\u2019s client; and\/or<\/li><li>Send an email to the sender about passed or failed DMARC authentication. &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Check out this great video from Cisco that breaks down what DMARC is:<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe title=\"What is DMARC?\" width=\"770\" height=\"433\" src=\"https:\/\/www.youtube.com\/embed\/qP9ODdimHvM?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Email Signing Certificates<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Email signing certificates, also known as <a href=\"https:\/\/cheapsslsecurity.com\/blog\/what-is-s-mime-what-it-is-why-you-need-it\/\">S\/MIME certificates<\/a>, are what you as a sender can use to digitally sign your emails. This type of X.509 digital certificate allows your recipients to verify whether the email was sent by you (not an imposter) and that it hasn\u2019t be altered in any way since you sent it. It also encrypts messages that are shared between two S\/MIME certificate users. (You just have to get a copy of the recipient\u2019s public key before you can start sending encrypted emails.)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The fundamental purpose of an email signing certificate is to:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Authenticate the email sender,<\/li><li>Encrypt email message (when corresponding with other S\/MIME certificate users), and<\/li><li>Ensure message integrity.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Increasing Your Organization\u2019s Cyber Hygiene a Through Awareness Training<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Is it enough to employ all the above measures for a fool-proof system? The answer is no. Every day, cybercriminals come up with new spins for old attack methods as well as entirely new attack methods to try to breach our defenses. As such, we must be proactive and mindful of every task we carry out to keep them at bay.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Training your employees about cyber hygiene is critical to supporting your overall cybersecurity efforts and for increasing employees\u2019 knowledge. After all, it only takes one wrong click from an employee for a full-fledged cyber attack or data breach. Some important topics that all cyber awareness trainings should cover include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-phishing-emails-attacks-from-being-successful\/\">Common phishing scams and tactics (including examples of email spoofing and social engineering),<\/a><\/li><li>Other types of cyber attacks,<\/li><li>Account and password security methods,<\/li><li>General cyber security best practices, and<\/li><li>What they should do when they experience or suspect a cyber attack or breach.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Always remember, training is not a one-and-done deal. Refresher courses on cyber security awareness must be carried on regularly to ensure that they are aware of the most current threats. Recent cyber attacks on other companies should be discussed with the employees so that they have information about how they were carried out and how they could have been prevented.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cyber security-themed quizzes, games, puzzles, and online games are also fun and engaging ways to increase your employees\u2019 cyber awareness. Building your defenses against cybercriminals to protect yourself should be your priority.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Final Words On Email Spoofing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Now that you understand what email spoofing is, you can realize that the best way to prevent such attacks is to raise awareness among your employees and staff members about it. Not opening dodgy emails, not clicking on the attachments or the links, and not even replying to such emails can go a long way to protect you against email spoofing attacks. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You also need to be willing to take technical steps to prevent someone from using your domain as part of their email spoofing campaigns. As you discovered, this means using DNS records in conjunction with protocols like SPF, DKIM and DMARC to your full advantage. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The FBI\u2019s Internet Crime Complaint Center (IC3) received an average of 2,000 cybercrime complaints per day with reported losses topping $4.1 billion in 2020. $216.51 million of these losses were the result of email spoofing. So, what is email spoofing? Let\u2019s learn more about it. One of the most common tactics cybercriminals use to trick<\/p>\n","protected":false},"author":8,"featured_media":6861,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[419],"tags":[438,421],"class_list":["post-6853","post","type-post","status-publish","format-standard","has-post-thumbnail","category-email-security","tag-email-spoofing","tag-featured"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>What Is Email Spoofing? An Explanation<\/title>\n<meta name=\"description\" content=\"Email spoofing is a tactic bad guys use to trick you or your brand&#039;s email recipients into thinking they&#039;re you or someone else. Not good...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Is Email Spoofing? An Explanation\" \/>\n<meta property=\"og:description\" content=\"Email spoofing is a tactic bad guys use to trick you or your brand&#039;s email recipients into thinking they&#039;re you or someone else. Not good...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/\" \/>\n<meta property=\"og:site_name\" content=\"Savvy Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cheapsslsecurities\" \/>\n<meta property=\"article:published_time\" content=\"2021-04-15T15:18:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-04-15T16:16:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/email-spoofing-feature.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"1000\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Savvy Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:site\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Savvy Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"14 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/\"},\"author\":{\"name\":\"Savvy Security\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#\\\/schema\\\/person\\\/1ce9a5743b7f25b5be6e4972864b4493\"},\"headline\":\"What Is Email Spoofing? An Explanation\",\"datePublished\":\"2021-04-15T15:18:34+00:00\",\"dateModified\":\"2021-04-15T16:16:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/\"},\"wordCount\":2797,\"image\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/email-spoofing-feature.jpg\",\"keywords\":[\"Email Spoofing\",\"featured\"],\"articleSection\":[\"Email Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/\",\"name\":\"What Is Email Spoofing? An Explanation\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/email-spoofing-feature.jpg\",\"datePublished\":\"2021-04-15T15:18:34+00:00\",\"dateModified\":\"2021-04-15T16:16:46+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#\\\/schema\\\/person\\\/1ce9a5743b7f25b5be6e4972864b4493\"},\"description\":\"Email spoofing is a tactic bad guys use to trick you or your brand's email recipients into thinking they're you or someone else. Not good...\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/#primaryimage\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/email-spoofing-feature.jpg\",\"contentUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/email-spoofing-feature.jpg\",\"width\":1600,\"height\":1000,\"caption\":\"email spoofing feature image of a yellow caution sign that warns \\\"email spoofing ahead\\\"\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/what-is-email-spoofing-an-explanation\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What Is Email Spoofing? An Explanation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/\",\"name\":\"Savvy Security\",\"description\":\"Practical cybersecurity advice\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#\\\/schema\\\/person\\\/1ce9a5743b7f25b5be6e4972864b4493\",\"name\":\"Savvy Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g\",\"caption\":\"Savvy Security\"},\"description\":\"Welcome to Savvy Security, a blog focused on providing practical cybersecurity advice for website owners and small businesses. Our team brings you the latest news, best practices and tips you can use to protect your business...without a multi-million dollar budget or 24\\\/7 security teams.\",\"sameAs\":[\"blogadmin\"],\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/author\\\/blogadmin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What Is Email Spoofing? An Explanation","description":"Email spoofing is a tactic bad guys use to trick you or your brand's email recipients into thinking they're you or someone else. Not good...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/","og_locale":"en_US","og_type":"article","og_title":"What Is Email Spoofing? An Explanation","og_description":"Email spoofing is a tactic bad guys use to trick you or your brand's email recipients into thinking they're you or someone else. Not good...","og_url":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/","og_site_name":"Savvy Security","article_publisher":"https:\/\/www.facebook.com\/cheapsslsecurities","article_published_time":"2021-04-15T15:18:34+00:00","article_modified_time":"2021-04-15T16:16:46+00:00","og_image":[{"width":1600,"height":1000,"url":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/email-spoofing-feature.jpg","type":"image\/jpeg"}],"author":"Savvy Security","twitter_card":"summary_large_image","twitter_creator":"@sslsecurity","twitter_site":"@sslsecurity","twitter_misc":{"Written by":"Savvy Security","Est. reading time":"14 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/#article","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/"},"author":{"name":"Savvy Security","@id":"https:\/\/cheapsslsecurity.com\/blog\/#\/schema\/person\/1ce9a5743b7f25b5be6e4972864b4493"},"headline":"What Is Email Spoofing? An Explanation","datePublished":"2021-04-15T15:18:34+00:00","dateModified":"2021-04-15T16:16:46+00:00","mainEntityOfPage":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/"},"wordCount":2797,"image":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/email-spoofing-feature.jpg","keywords":["Email Spoofing","featured"],"articleSection":["Email Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/","url":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/","name":"What Is Email Spoofing? An Explanation","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/#primaryimage"},"image":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/email-spoofing-feature.jpg","datePublished":"2021-04-15T15:18:34+00:00","dateModified":"2021-04-15T16:16:46+00:00","author":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/#\/schema\/person\/1ce9a5743b7f25b5be6e4972864b4493"},"description":"Email spoofing is a tactic bad guys use to trick you or your brand's email recipients into thinking they're you or someone else. Not good...","breadcrumb":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/#primaryimage","url":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/email-spoofing-feature.jpg","contentUrl":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/04\/email-spoofing-feature.jpg","width":1600,"height":1000,"caption":"email spoofing feature image of a yellow caution sign that warns \"email spoofing ahead\""},{"@type":"BreadcrumbList","@id":"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cheapsslsecurity.com\/blog\/"},{"@type":"ListItem","position":2,"name":"What Is Email Spoofing? An Explanation"}]},{"@type":"WebSite","@id":"https:\/\/cheapsslsecurity.com\/blog\/#website","url":"https:\/\/cheapsslsecurity.com\/blog\/","name":"Savvy Security","description":"Practical cybersecurity advice","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cheapsslsecurity.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cheapsslsecurity.com\/blog\/#\/schema\/person\/1ce9a5743b7f25b5be6e4972864b4493","name":"Savvy Security","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g","caption":"Savvy Security"},"description":"Welcome to Savvy Security, a blog focused on providing practical cybersecurity advice for website owners and small businesses. Our team brings you the latest news, best practices and tips you can use to protect your business...without a multi-million dollar budget or 24\/7 security teams.","sameAs":["blogadmin"],"url":"https:\/\/cheapsslsecurity.com\/blog\/author\/blogadmin\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/posts\/6853","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/comments?post=6853"}],"version-history":[{"count":0,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/posts\/6853\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/media\/6861"}],"wp:attachment":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/media?parent=6853"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/categories?post=6853"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/tags?post=6853"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}