Fraud & wire loss
Fake invoices and urgent payment emails sent as your company. One successful wire can cost $25,000–$120,000+ — money gone, not recovered.
For established business owners $25K+ lost to one fake email. Your name. Your trust.Someone can send as you — is your domain protected?
Enter your domain. Free check. No signup.
- No account required
- Plain English results
- Grade in seconds
TrueMark Email Trust Check
A free public tool · live stats from real SMB domain checks — objective data, not opinion.
Chart updates when live data is ready
High risk (70%)Med risk (20%)Protected (10%)
High risk = most exposed — scammers can impersonate those domains most easily.
About 9 out of 10 domains are not ready
Live SMB checks in progress…
527
SMB domains checked
474 of 527(90%)
Not ready
53
Protected
Goal
Raise awareness so business owners secure their domains and stop preventable email impersonation attacks.
True Mark tracks live how many real SMB domains can be impersonated by email — and how many are protected.
Vetted U.S. SMB domains from Google Places — the same check you can run here. How we sample & why it matters →
email-trust-check.com
Technical DNS details
A stranger emails as your company — your customer pays the invoice
They don't need your password. Without SPF, DKIM, and DMARC locked down, anyone can send mail that looks like it came from @yourcompany.com — and your customer can't tell.
-
Impersonator hits send
From a server they control — your domain in the From address. Your inbox is never touched.
-
Your customer trusts it
billing@yourcompany.com. Urgent invoice. Updated wire instructions. Looks exactly like you.
-
Your customer pays
Wire or ACH hits the scammer's account. They're sure they paid you.
-
You're left holding the bag
Unrecoverable wire. Chargebacks. Lawsuits. Trust you spent years building — gone in one email.
No hack. No breach. Just an unprotected domain. That's enough for a stranger to send as you — same name, same domain, real money gone before anyone notices.
What live SMB checks reveal — 90% SMB domains are NOT READY (live data) · Aug 23, 2026, 1:22 PM UTC
Real U.S. small-business domains · see last update below
527 domains analyzed · 474 of 527 not ready (90%)
About 9 out of 10 domains are not ready
Scanning U.S. small-business domains — live grades update as results come in.
High risk · most exposed (70%)Med risk · gaps remain (20%)Protected (10%)
-
257
No DMARC policy
-
196
Weak DMARC (monitor only)
-
128
SPF not published
-
300
DKIM not found
That leaves the door open for wire fraud, chargebacks, and lost trust. With AI, attackers scan domains in live time, spot what's exposed, and automatically craft mass-mail attacks — I'm seeing it with clients today. Wait until it happens and the cleanup costs far more than fixing this now.
Last updated 4 days ago at
Three ways this hits your wallet
Chargebacks & clawbacks
Customers pay a scammer thinking it was you. You eat chargebacks, refunds, and make-good costs — on top of the original loss.
Lawsuits & liability
When someone loses money to email impersonation, they look for someone to blame. Your business faces legal exposure, settlements, and reputation damage.