Understanding your check results

Your grade shows how easily scammers could abuse your domain in email. A or B means your customers are well protected. C means partial coverage — some fakes could still get through. D or F means urgent gaps that could cost you money or trust.

We count three essentials: fake-email blocking policy, approved senders list, and email signature verification. Brand logo in inbox (BIMI) is optional and does not affect your grade.

Each row is one layer protecting your business — not your overall safety in one lump sum.

• Approved sender list — Can unauthorized servers send mail as @yourdomain? Separate from whether fake mail still reaches your customers.
• Email signature verification — Do your messages carry proof they really came from you?
• Fake-email blocking policy — If checks fail, are your customers' inboxes told to reject mail claiming to be from you? This is why fake invoices can still arrive even when your sender list looks fine.

At risk or Needs work means scammers could exploit that gap. Protected means you're covered there.

The highlighted priority item is usually the biggest impersonation risk. For many domains, that is a missing or monitor-only DMARC policy. Share the report with your IT provider or DNS host and ask them to implement the missing piece.

DNS updates can take hours to propagate. Re-run the check the next day to confirm the grade improved.