Close dialog
A man in glasses is working on his laptop

Protect your Business from Email Spoofing

Help keep emails secure and protect your business with these top tips


Where would we be without email? It’s such a convenient way of communicating – particularly now many of us are working from home. Messaging each other has become second nature. So much so, we tend to forget some of email’s inherent security risks.

Email comes with a trade-off. What we gain in speed and efficiency, we lose in face-to-face contact. And that can make it difficult to be sure that the person who contacted us is who they say they are.

Knowing who sent an email sounds like common sense but bad actors are great at impersonating and making emails look legitimate. Photos can be downloaded from the internet. Email addresses can be tweaked in subtle ways. And when you’re in a sea of emails, you’d be surprised how easily you could be persuaded to click on malicious links or attachments.

It only takes one fake email to infiltrate an entire business – so make sure you and your team know the risks and how to avoid being tricked.

What is email spoofing?

As we discussed in a previous blog, phishing refers to the techniques used by criminals to deceive and manipulate people into handing over their personal details. Email spoofing is just one example.

It involves sending emails that are designed to look like the sender is someone they aren’t. Sometimes a general email can be sent to an entire workforce. Other times a single, highly targeted email can be sent to an individual – this is called ‘spear phishing’.

In both cases however, the goal is exactly the same: to trick people into performing an action that benefits the sender.

What actions? This list isn’t exhaustive, but it could include:

  • Clicking on a malicious link
  • Transferring funds
  • Opening an attachment
  • Providing login credentials
  • Sharing confidential personal/financial information
  • Following a link to a compromised site

Each of these actions have the potential to cause real harm to your business – both financial and reputational. Protecting against email spoofing is therefore so important. But thankfully, there’s plenty you and your business can do to stay safe.

Staying protected

Your business is only as strong as its weakest link

No one is exempt. From interns right up to the CEO, employees should be taught what to look out for. Red flags can include things like:

  • Language conveying urgency (‘ you must click this now’ )
  • The sender’s name not matching their email address
  • Poor spelling and grammar
  • Requests from people you wouldn’t normally receive
Protect you and your business from email spoofing

Lookout Mobile Security

Secure your business mobiles from a host of cyber threats.

Discover more

Aside from training, employees can use email signature certificates. This is basically a certificate that attaches to each email sent, confirming the sender’s identity. If everyone in an organisation has one, suspicious emails should stand out like a sore thumb.

It’s important not to underestimate spoof emails. As your workforce grows and the world embraces flexible working, you’ll rely on email more and more – giving bad actors more chances to strike.

Another way to give your employees a helping hand to stay protected against these kinds of emails is ensuring firewalls are turned on. This will give you that extra line of defence.

Additionally, encourage your team to keep their devices up to date.  It can be all too easy to snooze updates but keeping on top of them is a vital tool in the fight against email spoofing.

For more support discover our free business support helpline and ​speak to one of our Business Advisers by phone, contact form or web chat.
Wondering what you can ask? Our team can help with a range of digital topics

Related articles

Let's talk

Free one-to-one support

Available Monday to Friday, 8am-6pm, our friendly team are here to provide guidance and support on the topics that matter to your business.

0808 005 7400

Chat loading...
Content made available to you on this website is for general information purposes. Independent advice should be obtained for your needs. For full disclaimer, click here.

Social Facebook Footer

Social Facebook Footer


Social Twitter Footer

Social Twitter Footer


Social Linkedin Footer

Social Linkedin Footer


Social YouTube Footer

Social YouTube Footer


Social Instagram Footer

Social Instagram Footer