--- title: Free Email Security Check (SPF, DKIM, DMARC) | Cyber Guard description: Can scammers send email as your business? Check your domain's SPF, DKIM and DMARC free in seconds. Built for South African businesses. No sign-up. --- [![Copy of CYBER GUARD Racing (1)](https://www.cyber-guard.co.za/hubfs/Copy%20of%20CYBER%20GUARD%20Racing%20%20(1).png)](https://www.cyber-guard.co.za?hsLang=za) - Solutions - [All solutions](https://www.cyber-guard.co.za/solutions?hsLang=za) - [Endpoint Security](https://www.cyber-guard.co.za/solutions/endpoint-security?hsLang=za) - [Mobile Security](https://www.cyber-guard.co.za/solutions/mobile-security?hsLang=za) - [Email Security](https://www.cyber-guard.co.za/solutions/email-security?hsLang=za) - [Microsoft 365 & Cloud Security](https://www.cyber-guard.co.za/solutions/cloud-security?hsLang=za) - [24/7 Detection & Response](https://www.cyber-guard.co.za/solutions/managed-detection-response?hsLang=za) - Industries - [SMEs](https://www.cyber-guard.co.za/industries/sme?hsLang=za) - [Financial Services](https://www.cyber-guard.co.za/industries/financial-services?hsLang=za) - [Education](https://www.cyber-guard.co.za/industries/education?hsLang=za) - [Healthcare](https://www.cyber-guard.co.za/industries/healthcare?hsLang=za) - [Service Providers](https://www.cyber-guard.co.za/industries/service-providers?hsLang=za) - [Retail](https://www.cyber-guard.co.za/industries/retail?hsLang=za) - [Pricing](https://www.cyber-guard.co.za/pricing?hsLang=za) - [Cyber Warranty](https://www.cyber-guard.co.za/cyber-warranty?hsLang=za) - Guides & Tools - [Security Guides](https://www.cyber-guard.co.za/cyber-guard-blog?hsLang=za) - [Email Security Check](https://www.cyber-guard.co.za/tools/email-security-check) - [Cyber Security Cost Calculator](https://www.cyber-guard.co.za/tools/cyber-security-cost-calculator?hsLang=za) - Company - [About Us](https://www.cyber-guard.co.za/about?hsLang=za) - [FAQ](https://www.cyber-guard.co.za/faq-1?hsLang=za) - [Contact](https://www.cyber-guard.co.za/contact?hsLang=za) [Contact Us](https://www.cyber-guard.co.za/contact?hsLang=za) FREE TOOL # Free email security check: can scammers send email as your business? Enter your domain to check its SPF, DKIM and DMARC records in seconds. These three DNS records decide whether a scammer can send an email that appears to come from your exact address, a common trick behind fake-invoice and "updated banking details" fraud in South Africa. The check is free, needs no sign-up and only reads public records. ## Check your domain now Enter your business domain or work email address. Results in seconds. Your business email domain Check my domain The check only reads public DNS records. We don't keep your domain unless you ask us to send you the fix-it steps. WHAT WE CHECK ## What are SPF, DKIM and DMARC? They are three DNS records that prove an email really came from your business. SPF lists the servers allowed to send your email, DKIM adds a digital signature to every message, and DMARC tells providers like Gmail and Outlook what to do with email that fails those checks. Without a DMARC policy of quarantine or reject, forged email using your domain is usually delivered. #### DMARC policy Whether providers are told to reject, quarantine or ignore email that fakes your domain, and whether you receive reports. #### SPF record Whether your approved sending servers are listed correctly, with one record, a strict ending and no more than 10 lookups. #### DKIM signing Whether your outgoing email carries a digital signature on the common Microsoft 365, Google Workspace and hosting selectors. #### Email provider Which service handles your mail, so you know where to make the changes. HOW TO FIX IT ## How do I stop scammers sending email as my business? Publish one correct SPF record, switch on DKIM signing in Microsoft 365 or Google Workspace, then add a DMARC record. Start DMARC at p=none with a report address, check the reports for a few weeks to confirm all your genuine senders pass, then move to p=quarantine and finally p=reject. DMARC stops criminals using your exact domain. It doesn't stop look-alike domains such as yourbusiness-sa.co or a hacked supplier mailbox, which is why Cyber Guard also filters every incoming email for impersonation and fake banking details. [SEE EMAIL SECURITY](https://www.cyber-guard.co.za/solutions/email-security?hsLang=za) [WHAT WOULD IT COST US?](https://www.cyber-guard.co.za/tools/cyber-security-cost-calculator?hsLang=za) FAQ ## Email security check questions ### Is this email security check safe to use? Yes. It only reads public DNS records that anyone on the internet can see. It doesn't send email, log in to anything or store the domain you enter. ### What does DMARC p=none mean? It means you publish a DMARC record but tell email providers to take no action on forged email. It is a useful first step for collecting reports, but it doesn't stop impersonation until you move to p=quarantine or p=reject. ### Why does the check say DKIM wasn't detected? We test the selectors used by Microsoft 365, Google Workspace and common South African hosts. If your provider uses a custom selector, DKIM may be working but hidden from this check. Confirm it in your email admin settings. ### If my domain gets an A, am I safe from invoice fraud? You are protected against criminals using your exact domain. Many invoice-fraud attacks use look-alike domains or a hacked supplier mailbox instead, so you still need inbound email filtering and a rule that banking-detail changes are confirmed by phone. ### Why can't I check a Gmail or Outlook.com address? Free email services manage these records themselves. The check is for businesses that send email from their own domain, such as yourbusiness.co.za. ### Can Cyber Guard fix my SPF, DKIM and DMARC? Yes. Our free risk assessment includes a review of these records and the exact changes your domain needs, and our team can make them with you. ## Want a full picture of your email risk? Our free risk assessment goes further than DNS: it checks recent phishing, mailbox forwarding rules and sign-in risks, then shows you exactly what to fix. [GET A FREE RISK ASSESSMENT](https://www.cyber-guard.co.za/free-risk-assessment?hsLang=za) [START FREE TRIAL](https://www.cyber-guard.co.za/free-trial-1?hsLang=za) Chat to Cyber Guard On WhatsApp · Mon–Fri 8am–5pm, reply within 4 business hours × What can we help with? Pick one, add your details, and we'll write the message for you. ← Back Your details Your name \* Work email \* Mobile number \* Your message Open WhatsApp By continuing you agree that Cyber Guard may contact you about your enquiry, in line with POPIA. [Or call +27 68 918 3511 now](tel:+27689183511) ![Website logo](https://www.cyber-guard.co.za/hubfs/Website%20logo.webp) Cyber Guard Africa (Pty) Ltd Fourways, Sandton Johannesburg, South Africa. [info@cyber-guard.co.za](mailto:info@cyber-guard.co.za) +27 68 918 3511 ### Solutions - [Endpoint Security](https://www.cyber-guard.co.za/solutions/endpoint-security?hsLang=za) - [Mobile Security](https://www.cyber-guard.co.za/solutions/mobile-security?hsLang=za) - [Email Security](https://www.cyber-guard.co.za/solutions/email-security?hsLang=za) - [Cloud Security](https://www.cyber-guard.co.za/solutions/cloud-security?hsLang=za) - [Detection & Response](https://www.cyber-guard.co.za/solutions/managed-detection-response?hsLang=za) ### Industries - [SME](https://www.cyber-guard.co.za/industries/sme?hsLang=za) - [Financial Services](https://www.cyber-guard.co.za/industries/financial-services?hsLang=za) - [Education](https://www.cyber-guard.co.za/industries/education?hsLang=za) - [Healthcare](https://www.cyber-guard.co.za/industries/healthcare?hsLang=za) - [Service Providers](https://www.cyber-guard.co.za/industries/service-providers?hsLang=za) - [Retail](https://www.cyber-guard.co.za/industries/retail?hsLang=za) ### Company - [Cyber Warranty](https://www.cyber-guard.co.za/cyber-warranty?hsLang=za) - [Pricing](https://www.cyber-guard.co.za/pricing?hsLang=za) - [About](https://www.cyber-guard.co.za/about?hsLang=za) - [FAQ](https://www.cyber-guard.co.za/faq-1?hsLang=za) - [Contact Us](https://www.cyber-guard.co.za/contact?hsLang=za) ### Get Started - [Free Trial](https://www.cyber-guard.co.za/free-trial-1?hsLang=za) - [Free Risk Assessment](https://www.cyber-guard.co.za/free-risk-assessment?hsLang=za) - [Contact Us](https://www.cyber-guard.co.za/contact?hsLang=za) - [Email Security Check](https://www.cyber-guard.co.za/tools/email-security-check) - [Cost Calculator](https://www.cyber-guard.co.za/tools/cyber-security-cost-calculator?hsLang=za) - [Security Guides](https://www.cyber-guard.co.za/cyber-guard-blog?hsLang=za) © 2026 Cyber Guard Africa (Pty) Ltd. All rights reserved Privacy Policy [Powered by Atlas - a B2B SaaS HubSpot theme](https://www.kalungi.com/atlas-hubspot-theme-for-b2b-saas-software) ```json { "@context" : "https://schema.org", "@type" : "WebApplication", "applicationCategory" : "SecurityApplication", "description" : "Checks a domain's SPF, DKIM and DMARC records to show whether scammers can send email that appears to come from it.", "name" : "Free Email Security Check", "offers" : { "@type" : "Offer", "price" : "0", "priceCurrency" : "ZAR" }, "operatingSystem" : "Any", "provider" : { "@type" : "Organization", "name" : "Cyber Guard Africa", "url" : "https://www.cyber-guard.co.za" }, "url" : "https://www.cyber-guard.co.za/tools/email-security-check" } ``` ```json { "@context" : "https://schema.org", "@type" : "FAQPage", "mainEntity" : [ { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Yes. It only reads public DNS records that anyone on the internet can see. It doesn't send email, log in to anything or store the domain you enter." }, "name" : "Is this email security check safe to use?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "It means you publish a DMARC record but tell email providers to take no action on forged email. It is a useful first step for collecting reports, but it doesn't stop impersonation until you move to p=quarantine or p=reject." }, "name" : "What does DMARC p=none mean?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "We test the selectors used by Microsoft 365, Google Workspace and common South African hosts. If your provider uses a custom selector, DKIM may be working but hidden from this check. Confirm it in your email admin settings." }, "name" : "Why does the check say DKIM wasn't detected?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "You are protected against criminals using your exact domain. Many invoice-fraud attacks use look-alike domains or a hacked supplier mailbox instead, so you still need inbound email filtering and a rule that banking-detail changes are confirmed by phone." }, "name" : "If my domain gets an A, am I safe from invoice fraud?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Free email services manage these records themselves. The check is for businesses that send email from their own domain, such as yourbusiness.co.za." }, "name" : "Why can't I check a Gmail or Outlook.com address?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Yes. Our free risk assessment includes a review of these records and the exact changes your domain needs, and our team can make them with you." }, "name" : "Can Cyber Guard fix my SPF, DKIM and DMARC?" } ] } ```