Skip to main content
023.002

Spoofing

The "false flag" attack. This section defines spoofing—the act of a spammer sending an email that looks like it came from you (e.g., ). This is the 'pirate ship' sailing under your fleet's flag.

15 questions in this topic

Questions about Spoofing

What is email spoofing? How does spoofing work technically? What are the different types of spoofing (header, display name, domain)? How do spammers fake sender identities? What is “friendly name spoofing”? How can DMARC prevent domain spoofing? What does a spoofed header look like? How can you tell if an email is spoofed? What’s the difference between spoofing and impersonation? Can SPF or DKIM alone stop spoofing? What is a spoofing attack using lookalike domains? How do scammers register visually similar domains (homoglyphs)? How can spoofing bypass weak authentication setups? How do ESPs detect spoofed senders? What tools help detect spoofing attempts?