How We Fight Against Email Scam

Email is the most preferable communication channel for lots of businesses 86% of professionals use email 270 million emails were sent daily in 2017

Protection Myths Email Fraud I use Gmail to send emails from my domain, I am safe I use Email Security Gateway Antivirus

~23% attempts are successful Email sending protocol is not secure. “From:” field can be faked by hackers Average Loss 1.6 million per company ~23% attempts are successful

1 out of 3 businesses became a victim of CEO Fraud

7-day nightmare in Natfood

The most powerful and effective DMARC The most powerful and effective EMAIL AUTHENTICATION

About DMARC 100% protection from same-domain phishing attacks Industry standard adopted by vast majority of top mailbox providers No infrastructure change, just a DNS record Email traffic statistics, without any content (only content of phishing emails are visible)

Sender Policy Framework (SPF), to paraphrase RFC 7208, is a protocol that not only allows an organization to authorize hosts and networks to use its domain names when sending email, but also provides a way that a receiving host can check that authorization. SPF

Authentication is a way to prove an email isn't forged. Domain Keys Identified Mail (DKIM) is an email authentication method designed to detect email spoofing. It allows the receiver to check that an email claimed to have come from a specific domain was indeed authorized by the owner of that domain DKIM Authentication is a way to prove an email isn't forged.

DMARC Domain Message Authentication Reporting & Conformance DMARC makes it easier to identify spam and phishing messages and keeps them out of receivers' inboxes. Both senders and receivers easily determine whether a given message is legitimately from the sender or not, and what to do if it isn’t. DMARC Domain Message Authentication Reporting & Conformance

How to create a DMARC record "v=DMARC1;p=reject;pct=100;rua=mailto:rep@easydmarc.com" v protocol version v=DMARC1 pct % of msg subjected to filtering pct=20 ruf reporting URI for forensic reports ruf=mailto:authfail@example.com rua reporting URI of aggregate reports rua=mailto:aggrep@example.com p policy for organizational domain p=quarantine sp policy for subdomains of the OD sp=reject adkim alignment mode for DKIM adkim=s aspf alignment mode for SPF aspf=r

How it Works

DMARC is so great, why isn’t everyone doing it? Because ... DMARC requires diligence and is hard to deploy, as perfectly valid emails can be blocked either

Best Practice Start from p=none Change only one parameter at a time and start by DMARC first because of its reporting capabilities.

DMARC Aggregated Reports

Visualize and set up Alerts 1. DMARC

Benefits of DMARC Protects your brand and domain Boost Your business reputation. Reach the inbox Visibility: See who sends emails from Your domain Email ecosystem as a whole become more secure and more trustworthy.

BETTER SAFE THAN SORRY Thank You @GerasimH @AvagArakelyan