Email spoofing happens when a message is made to look like it came from someone else.
Attackers may try to imitate a company executive, vendor, or trusted business.
Modern email systems use technologies such as SPF, DKIM, and DMARC to help verify whether a message is authorized to use a company’s domain.
These controls do not eliminate every type of email fraud, but they make domain impersonation more difficult.
Businesses should also train employees to recognize that a display name is not proof of identity.
A message that says “From: Company President” may still come from an unrelated address.
Email authentication, filtering, MFA, and user awareness all work together to reduce the risk of spoofing and impersonation.