What can I do if my email address is being used for phishing emails?

Email marketer from Mailjet shares that you should monitor your domain reputation, as this can alert you to unusual email activity. Mailjet also shares that it's important to educate your customers on how to identify phishing attempts that use your domain. Encourage them to be suspicious of unexpected emails.

Email marketer from SendPulse explains that educating recipients about potential phishing campaigns is essential. SendPulse says you should inform your contacts about phishing and spoofing schemes using your brand and what steps to take if they receive a suspicious email. Also implement SPF, DKIM and DMARC.

Email marketer from Reddit shares that if it is a hacked account you need to change your password immediately, enable two-factor authentication, check for unusual account activity, and scan your computer for malware.

Email marketer from Email Marketing Forum shares that setting up a DMARC policy, even at p=none, allows you to start receiving reports about the sources using your domain. This provides visibility into potential abuse and enables you to adjust your authentication policies.

Email marketer from Reddit shares to report the phishing to the FTC, Google Safe Browsing, and the Anti-Phishing Working Group.

Email marketer from KnowBe4 shares you should first understand whether your email address is being spoofed or if your account has been compromised. Spoofing means cybercriminals are forging your email address, whereas a compromised account means they've gained access to it.

Email marketer from Email Geeks shares that if you can get your hands on the full headers of a message, you may be lucky and it will identify a legit provider that is being used (abused) to send the messages and that you could go bother them.

Email marketer from Email Deliverability Forum suggests checking if your domain has been blacklisted and taking steps to get removed from any blacklists. This can help restore your domain's reputation and prevent legitimate emails from being blocked.

Email marketer from Proofpoint advises monitoring your domain for unauthorized use. Proofpoint explains that you should implement DMARC to protect your domain from being spoofed. It also stresses the importance of proactive communication with customers, explaining how to recognize phishing emails.

Email marketer from Spamhaus explains that spamhaus can assist in monitoring your IP to confirm if it has been added to the Blocklist which is a good indicator for spam like activity.

Expert from Email Geeks explains that DMARC is worth doing, but without a baseline of “normal” DMARC background noise it may not be as easy to see whether it’s meaningful or not.

Expert from Email Geeks explains that in the short term there is not much you can do if your email address is being used in phishing emails. Longer term, DMARC is designed to discourage this.

Expert from Spamresource explains that if your domain is being abused, monitor for any trends to detect phishing campaigns, then send alerts to the parties being targeted to warn them.

Expert from Email Geeks shares that implementing dmarc at a "p=none" will give you some insights into the scope/size of there are actual phishing campaigns underway targeting your brand

Expert from Email Geeks shares that if they are phishing your service then warning customers that there are phishing attempts going around may not be a bad idea.

Expert from Email Geeks explains that sometimes From: addresses are just pulled from spam lists at random and waiting and seeing what happens is the easiest way to tell if it’s one or the other (random or targeted).

Expert from Word to the Wise explains that if your account has been compromised, immediate steps are required, and it can cause downstream email issues if left unresolved.

Documentation from Microsoft recommends using Exchange Online Protection (EOP) and Office 365 Defender for comprehensive anti-phishing capabilities. EOP can analyze emails for forgery of sender addresses and use of domains that have been intentionally created for phishing.

Documentation from DMARC.org outlines how DMARC allows domain owners to specify how email receivers should handle messages that fail authentication checks (SPF and DKIM). DMARC helps prevent attackers from spoofing your domain. It also provides reporting mechanisms to gain insights into how your domain is being used.

Documentation from Cloudflare explains how to set up SPF (Sender Policy Framework) to authorize sending mail servers, this prevents attackers from spoofing your domain. SPF records are DNS TXT records that list the IP addresses and domains authorized to send emails on behalf of your domain.

Documentation from Google Workspace Admin Help explains that you can report phishing attempts to Google. Reporting helps Google improve its phishing detection and prevention systems. Google also recommends setting up DMARC, DKIM, and SPF to prevent spoofing.