How can attackers misuse my brand in email?

Domain **spoofing**: sending as your exact domain when **DMARC** isn't enforced. Messages appear to come from you, leveraging your reputation for **phishing** or fraud.

Lookalike domains: registering similar domains (typos, homoglyphs) and sending email that appears to be from your brand. Authentication doesn't help since attackers own these domains.

Visual **impersonation**: copying logos, colors, and templates in email from unrelated domains. Recipients recognize your brand but don't notice the sender domain differs.