HI,

I was getting bouncebacks from people I had never emailed so I realised my email had been spoofed.

I used Dmarcian and I now have DMARC, DKIM and SPF records all set but the spoofing hasn't stopped!

Does anyone know what I can do to prevent this?

Thanks

Dave

Disable the email account and leave it for a couple of weeks.

The spammers will stop using it after a while so you can enable it again.

Thanks but I can't disable a business email account I use everyday for 2 weeks

Then you are stuffed until they give up.

SPF does help but a lot depends on how your host is managing your emails. You need to talk to them.

A client of mine had 43,000 emails in less than 24 hours - that's with DKIM, and SPF enabled.

Yep, when someone spoofs a live email address it's a bit of a pain. I've got a couple of domains where this happens regularly - they mainly use email addresses (or variations of) harvested from Whois.

What you could try is applying some email filtering. If the bounce emails contain specific wording you could filter them out that way and send them to your bitbucket (delete them). For example if the subject text is "Get viagra now" you could filter all emails that have the word viagra in the subject to be deleted.

The main problem with spoofing is you get the 'undeliverable' message.

The recipient's email system rejects the spam and you get the report. It's this that causes all the pain not the fact an email was sent from using email address.

Unless it doesn't get rejected and I get reported as spam and blacklisted.

Which may well happen anyway.