logo

Real or Fake? How to Spoof Email

ID: 36d134a7-b47a-5b32-ac9d-046c048f5a7d

STIX ID: report--36d134a7-b47a-5b32-ac9d-046c048f5a7d

Feed Name: TrustedSec blog

Date Published: 2025-03-24

Date Updated: 2026-05-01

...
...

This post explains why email sender addresses are easy to forge due to the trusting design of SMTP, walks through SMTP envelope and message header mechanics with annotated examples of sender/header spoofing and mismatched spoofing used in phishing and business email compromise, and briefly notes that SPF, DKIM, and DMARC are available mitigation tools.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.