Free guides

Scam and impersonation guides

Plain-English guides: DMARC, email spoofing, lookalike domains, fake invoices, hacked Facebook pages, scam calls and romance scams.

For businesses

What is DMARC and do I need it?
DMARC tells inboxes what to do with email that fakes your domain. What it is, why Gmail, Yahoo and Outlook now expect it, and how to set it up safely.
How to stop someone spoofing your email domain
Customers getting emails “from you” that you never sent? How to confirm it’s spoofing, lock your domain down with SPF, DKIM and DMARC, and warn clients.
Lookalike domain examples
Typos, swapped letters, homoglyphs, extra words and new TLDs: real patterns used in lookalike domains, how to spot them and how to check yours for free.
Fake invoice email scams: how to spot one
“Our bank details have changed” is the most expensive email many businesses ever get. Warning signs of fake invoice and payment-redirection scams, and a 5-minute check before you pay.
Hacked Facebook business page: what to do
Locked out of your Facebook Page or Business account? The official Meta recovery routes, what to do in the first hour, and how to stop it happening again.
Is this a scam number? How to check
Got a call or text from an unknown number? Free ways to check who it is, the red flags of scam calls, and where to report a scam number in AU, US, UK and NZ.