Key points at a glance
- Fake invoice emails need neither links nor attachments – which is why filters often fail to catch them.
- DMARC with p=reject stops fraudsters from misusing your own domain as the sender.
- The most effective rule: always confirm new bank details by calling back on a known number.
The three most common scams
- Spoofed sender: the email carries the genuine domain of your company or a supplier. This works when that domain is not protected with DMARC p=reject.
- Lookalike domain: fraudsters register a domain that looks almost identical, for example with swapped letters or a different ending.
- Hijacked mailbox: a genuine account has been hacked; the fraudsters read along and insert themselves into an ongoing invoice exchange.
Why this is so dangerous
Such emails often contain neither links nor attachments. Virus scanners and spam filters therefore often fail to flag them – the email looks like a completely normal business email.
Technical protection
- DMARC with p=reject on all your domains, including those that send no email.
- Monitor similarly spelled domains so you can warn people early.
- Multi-factor authentication (MFA) for all mailboxes, so accounts cannot be hijacked.
- Visibly flag external emails in the mailbox.
Free domain check
Is your company address protected?
Enter your domain or your email address. You see the result right here, with a traffic light and a grade from A to F.
You opened a link to a result. The check only starts when you click, always with the current state.
Privacy: if you enter an email address, we transmit only the domain; the part before the @ never leaves your browser. We use the domain only for this check of public DNS records and do not store it in plain text; we do not store the result. We store your IP address only as a checksum and for at most one day to curb abuse.
The quick check is based on public DNS data at the time of the query and does not replace a full review; no warranty.
Keep an eye on it continuously instead of checking once:
Book a free initial callMonitor your domain – 14 days freePrefer some help? Ask us to set it up- No commitment
- No credit card
- Ends on its own after 14 days
No-obligation request by email · price on request
What happens next
- Your email program opens a prepared request with your domain. Add your name and send it.
- We get back to you and discuss with you or your IT partner which records (SPF, DKIM, DMARC) are needed and what the setup costs.
- The setup needs access to the DNS management of your domain. We agree the handover with you – please never send us passwords by email.
- If you wish, DomainRadar then monitors your domain continuously and alerts you when something changes.
No email program opens? Write to us with your domain at info@domainradar.ch.
Good to know: this protection stops anyone forging exactly your domain. Against look-alike addresses, always confirm payment changes by phone.
All checks
Quick check based on public DNS records. Continuous monitoring also checks certificates, blocklists and your DMARC reports.
Your result as a PDF
As a report to keep or to forward to your IT.
Free and without an account: you confirm your address by email and can unsubscribe at any time.
Organisational protection: the key rule
No technology replaces a clear process: changes to bank details are never accepted by email alone. Call the supplier on a number you already know – not the number given in the email. Payments to new accounts need a second person to approve them.
- Email with new bank detailsDon’t reply, and don’t pay anything yet.
- Call backCall the supplier on a number you already know, never the number given in the email.
- Four-eyes principleA second person approves the payment to the new account.
- Only then payUpdate the confirmed bank details in your system and trigger the payment.
If it has already happened
Inform your bank immediately – a payment can often still be stopped within the first few hours. File a report with the police, keep the email with all its headers, and check whether a mailbox has been hijacked (change the password, check forwarding rules).
Keep an emergency number handy
Keep your bank’s emergency number somewhere your accounting team can find it immediately. In cases of fraud, every hour counts.
How DomainRadar helps
DomainRadar shows whether your domains are protected against forgery, guides you to p=reject, reports similarly spelled domains and alerts you when forgeries in your name appear in the DMARC reports.
The domain check stays free. Afterwards you test DomainRadar with all features for 14 days – no credit card, the trial ends on its own.