Website Checker / Email protection
SPF and DMARC check: can someone send email in your name?
Two public DNS records that tell mail services who is allowed to send email in the name of your domain, and what to do with fakes.
What the colours mean
- OK. SPF and DMARC are set up, and fake emails in your name are blocked.
- Needs attention. Protection is only partly set up — for example, DMARC is in monitoring mode and fakes still get through.
- Problem. There is no SPF or no DMARC. Anyone can send emails that look as if they come from your company.
Why it matters for your business
- Scammers can send "invoices" to your customers from your address.
- Your real emails are more likely to land in spam.
- Since 2024 Gmail and Yahoo require SPF and DMARC from bulk senders.
What you can do yourself
- Ask your email provider for the correct SPF record and add it as a TXT record in DNS.
- Add a DMARC record starting with p=none, read the reports for a few weeks, then switch to p=quarantine.
- If the domain does not send email at all, use "v=spf1 -all" and "p=reject".
What OLBO can do
Technical website audit — from €490, 2 working days: a report with exact instructions for your developer.
Common doubts
We don't send newsletters — why does this matter?
Spoofing targets your customers, not your newsletter: a fake invoice that looks like it comes from your address is enough.
Can DMARC block our own emails?
Only if it is tightened too early. Start in monitoring mode (p=none), read the reports, then switch to quarantine.
What this usually costs
Approximate prices from open sources — for orientation only.
| USA | $800–2,400 |
|---|---|
| Europe | $400–1,600 (UK) |
| OLBO | from €490 |
Estimate: a technical audit takes about 8–16 hours × average agency hourly rates (Clutch). Sources: Clutch «Web design pricing» (updated 21 September 2026). Prices vary with scope; OLBO prices are fixed after a free brief.