Email authentication and deliverability
Phishing
An email that pretends to come from someone you trust to get your password, payment or personal data.
Typical signs are pressure ("within 24 hours"), a request to log in or pay, a sender name that does not match the domain after @, look-alike domains such as paypa1 instead of paypal, and links whose text shows a different address than the one they open. Companies protect their own domain with SPF, DKIM and DMARC at p=reject, so receivers reject emails that only pretend to come from it.
Related terms
- DMARC: The policy that tells receivers what to do when mail fails SPF and DKIM, and where to report.
- DKIM (DomainKeys Identified Mail): A signature on each message, checked against a public key in your DNS.
- DMARC alignment: The DMARC rule that SPF or DKIM only counts when its domain matches the domain in the visible From address.
