Who's sending email as you?
Your customer gets an invoice that looks like it came from you: same name, same logo, plus “our bank details have changed.” They pay. The money is gone. Many small business domains don't have the settings that tell inboxes to reject email faking their name. SenderHound sniffs out whether a stranger could send email as your business today, then tells you how to shut that door, in plain English.
How the fake-invoice scam works
- A scammer sends an email that shows your business as the sender, or comes from a domain that looks almost like yours.
- It asks your customer to pay a new invoice, or says your bank details have changed.
- The customer pays the scammer, and often blames you.
The FBI counted $3.05 billion in reported business email compromise losses in 2025 across all business sizes (FBI IC3 2025 report). Not all of it comes from spoofing, but closing the spoofing gap is one of the cheapest fixes.
What SenderHound checks
- Can someone send as you? Your SPF, DKIM and DMARC settings: whether inboxes can tell real mail from fakes using your domain. (Main check, free.)
- Lookalike domains: registered look-alikes of your domain (like a swapped letter) and whether they're set up to send email.
- Leaked logins: after you prove you own the domain, whether it appears in a known public breach (Have I Been Pwned catalog). Checking individual staff addresses needs a paid data licence and is not live yet.
Pricing
Full scan plus a ranked fix list with copy-paste steps, as a PDF.
We re-check monthly and tell you what changed.
Got a “new bank details” email? Check whether it came from a lookalike domain before anyone sends money.
Free tool: has a password been leaked?
Type a password your team uses. It's checked in your browser: the password and its full hash never leave this page, and we never see it.
Uses the free Pwned Passwords service by Have I Been Pwned.