Email security

Email security against phishing and fake invoices

Most attacks on small businesses start with an email: a link to a fake sign-in page, an attachment carrying malware, or a convincing request to change bank details on an invoice. Email is also how criminals impersonate you to your own clients and vendors.

Mayertech sets up and manages layered email protection for Microsoft 365 and Google Workspace, so fewer bad messages reach your inbox, stolen passwords don’t open your mailbox, and your domain is harder to fake.

Free tool

Check your domain’s email security in seconds

Enter your domain and get an instant grade for your SPF, DMARC, DKIM and mail server records, plus a step-by-step fix list for your email provider.

What we set up

Layers that protect your inbox and your name

  • Spam and phishing filtering

    Incoming mail is filtered for spam, phishing links, malicious attachments and impersonation attempts before it reaches your staff.

  • SPF, DKIM and DMARC

    The DNS records that prove which servers may send email as your domain, set up correctly and moved to enforcement in stages so real mail keeps flowing.

  • Multi-factor sign-in

    A second step at sign-in, so a stolen password alone can’t open a mailbox or be used to send email in your name.

  • Fake-invoice defense

    Warnings on outside senders and look-alike domains, plus a simple verification habit before anyone changes payment details or sends money.

  • Staff awareness training

    Short training and realistic practice phishing emails help your people recognize a scam before they click.

  • Watching and responding

    We review alerts and suspicious sign-ins, and if an account is compromised we lock it down, remove harmful rules and help you get back to normal.

Why DMARC matters

Make it harder for criminals to send email as you

Without SPF, DKIM and DMARC, anyone can send email that appears to come from your domain. Your clients and vendors have no easy way to tell it apart from the real thing.

Large email providers now expect these records from businesses that send email, and messages from domains without them are more likely to land in spam. Getting them right protects your reputation and your deliverability at the same time.

First step

Start with a free email security check

As part of the free IT assessment, we check your email filtering, sign-in security and your domain’s SPF, DKIM and DMARC records, and tell you plainly what to fix first.

FAQ

Frequently asked questions

Doesn’t Microsoft 365 or Google Workspace already filter spam?

Both include filtering, but the default settings leave gaps. We tune the built-in protection, add layers where they help, and set up the domain records and sign-in security that filtering alone doesn’t cover.

Will setting up DMARC stop our real emails from being delivered?

Not when it’s done in stages. We start by monitoring, identify every service that legitimately sends email for you, such as your website, billing or marketing tools, and only then tighten the policy.

What should we do if someone clicked a phishing link?

Call us right away. We reset the password, end active sessions, check for forwarding rules or changes the attacker made, and review what else the account could reach.

Is this part of managed IT or separate?

Email security is included in our managed IT and managed security plans, and we can also set it up as a project for businesses that handle the rest of their IT themselves.

Ready to make your email harder to attack?

Start with a free, no-obligation assessment and a practical list of what to fix first.