You are signed in. Close

You are signed out. Close

Thank you. Your subscription has started. Close

Thank you. You will get an email when a new comic comes out. Close

We could not confirm your payment. If you paid, use the link "Sign in" at the bottom of the page. Close

Something went wrong on our side. Please try again in a moment. Close

Previous episode DMARC: how a domain tells mail servers what to do with fakes

How email works: why a fake email from your boss can reach your inbox

Display names and lookalike domains: why a fake email can pass every check

Every security check says yes, and the email is still a scam. What do email checks really prove, and what do they never look at?

  1. 1 Thursday, half past four. Your phone shows a new email from Miva, "Quick favour before 5": one small invoice to pay today, to a new supplier.MivaQuick favourbefore 5youThursday, 4:30

    Thursday, half past four. Your phone shows a new email from Miva, "Quick favour before 5": one small invoice to pay today, to a new supplier.

  2. 2 This one passed every check: SPF, DKIM, and DMARC too. Yet Miva is right there in the workshop, and she wrote nothing.SPF: passDKIM: passDMARC: passMivaNot me!

    This one passed every check: SPF, DKIM, and DMARC too. Yet Miva is right there in the workshop, and she wrote nothing.

The rest of this episode is for subscribers

Subscribe to read every premium episode. You can cancel when you want.

Paid yearly: $99 instead of $119.88

Next episode Spam filters: how a mail server decides what lands in the spam folder

Share this comic

More comics