Passionfruit Design

Stop people faking your email address

Anyone can send an email that claims to come from your address, unless your domain name says otherwise. I set it up so fakes are rejected and your real email still arrives.

Who it is for

Any organisation that sends email from its own domain name: charities, schools, small businesses.

It matters most if you send invoices, appeals for money or anything else a fraudster would like to copy.

What you get

  • A check of how your email is set up today.
  • Every service that sends email in your name found and set up properly.
  • Fakes rejected by the systems that receive them, not just marked as suspicious.
  • Your own email still arriving.

How it works

I look up how your domain name is set up today. I find everything that sends email in your name: your mailbox provider, your website, your newsletter tool. I set each one up to sign its messages.

Then I tighten the rules in stages, reading the reports as I go, until fakes are rejected.

What it costs to run

Nothing extra each month. The settings live in the records for your domain name, which you already pay for. The work is done once, then checked whenever you add a new service that sends email.

I do not list prices here yet. Tell me what you need and I will tell you what it costs to build and what it costs to run.

Questions people ask

How do I know if our email address can be faked?

Send me your domain name. The settings are public, so I can look them up and tell you what I find.

Will it stop our own email arriving?

No. That is why I do it in stages. I make sure every service that sends for you is set up before fakes are rejected.

Do we need to change email provider?

No. It works with the email provider you already use.

Work like this

  • Solent Gay Men's Chorus

    A choir and registered charity. I built and run everything they have online: the website, ticket sales and the members' area. The committee updates the site itself, and tickets are sold with no ticket company's fee on top.

For IT people

The standards are SPF, DKIM and DMARC. I take domains to DMARC p=reject with DKIM aligned.

  • Email authentication

    DMARC p=reject setup with SPF and DKIM aligned, without losing legitimate mail on the way. In production for a charity and for this domain.

Tell me what you need

A few lines about the project is enough. I read every message myself. I meet people face to face within about 30 miles of Portsmouth, and work with organisations anywhere in the UK.

Send me a message

Or email hello@passionfruit.design, or call or WhatsApp 07385 509278.