---
title: "Email Impersonation Protection | Phish Protection"
description: "Email Impersonation Protection PhishProtection Technology Protects Against Email Impersonation The email impersonation challenge"
image: "https://phishprotection.com/images/og-default.png"
canonical: "https://phishprotection.com/email-impersonation-protection/"
---

#  Email Impersonation Protection 

## **Email Impersonation Protection**

### PhishProtection Technology Protects Against Email Impersonation

#### The email impersonation challenge

Whether they’re called impersonation attacks, [business email compromise](/content/business-email-compromise/), [CEO fraud](/products/ceo-fraud-protection/) or [whaling attacks](/content/whaling-attacks/), email impersonation attacks are typically designed to trick recipients into making fraudulent financial transactions by pretending to be from someone they’re not.

What makes these attacks so challenging is that many don’t use malicious URLs or malware attachments. Asking employees to defend against them is asking a lot. Realistically, email impersonation attacks can only be stopped with email anti-impersonation solutions and [anti-phishing solutions](/).

![Growing Phishing Attacks 1](https://media.mailhop.org/phishprotection/images/2019/01/growing-phishing-attacks-1.png) 

### Email impersonation attacks are prevalent and on the rise\*\*\*\*

According to [KnowBe4](https://www.knowbe4.com/), one in six users receives an email-based impersonation attack. According to [ESRA](http://www.esrahomepage.eu/), there has been an 80% increase in impersonation attacks over the last quarter (Q2, 2018). Email impersonation has become the preferred method for phishing attacks.

You may think you’re immune if you use a hosted solution like Office 365, but you’d be wrong. Using a hosted solution makes you more of a target not less. Of the impersonation attacks that were detected, 61% were against Office 365 users, making third party [office 365 phishing protection](/office-365-phishing-protection/) solutions an essential requirement.

### The two sources of email impersonation

Email impersonation can be accomplished two ways: _domain\_ name spoofing and display name spoofing. With [domain name spoofing](/content/domain-name-spoofing/), attackers send an email from a domain that looks like the real domain but has some nearly imperceptible difference. This attack is effective because most email recipients don’t look very closely at the “from” email address._

_With display name spoofing, attackers send an email from any domain, usually a free one, but replace the “display name” with the name of an associate or authorized signer on an account. This attack is effective because most email clients, especially mobile ones, only show the display name and not the from address. Rarely can employees be counted on to check the from email address._

_![Two Email Impersonation 1](https://media.mailhop.org/phishprotection/images/2019/01/two-email-impersonation-1.png) ![Advanced Phish Protection 1](https://media.mailhop.org/phishprotection/images/2019/01/advanced-phish-protection-1.png)_ 

_### There is technology to stop email impersonation_

_There is a solution that can prevent email impersonation attacks and offer a [phishing prevention](/content/phishing-prevention/) solution. It’s called DMARC (Domain-based Message Authentication, Reporting & Conformance) and unfortunately most companies have not deployed it. A research report from Farsight Security indicates that less one percent of all domains are authenticated and protected by DMARC._

_A report from Agari also provides compelling evidence of the successes of DMARC adoption in protecting customers and brands, driving [phishing](/resources/what-is-phishing/) rates near zero. However, “with DMARC enforcement at only 27% of those firms who have adopted DMARC, it also shows how few enterprises have put these proven controls in place.”_

_### The right solution: DMARC + SPF + DKIM_

_DMARC, as part of a layered defense that includes Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM), is effective against email impersonation._

_#### SPF_

_SPF specifies a list of authorized sending IP addresses for a given domain._

_#### DKIM_

_DKIM sends cryptographically signed messages. This ensures the messages weren’t altered in transit between the sending and receiving servers._

_#### DMARC_

_DMARC is built on top of DKIM and SPF. It lets users tell their ISPs how they want them to behave if SPF and DKIM fail or aren’t present._

_If your company is not using DMARC with SPF + DKIM, you’re not taking full advantage of available technology to give your organization [email impersonation protection](/products/email-impersonation-protection/)._

_[Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection)_

_![Right Phshing Solution 1](https://media.mailhop.org/phishprotection/images/2019/01/right-phshing-solution-1.png)_ 

_### Enterprise-class email protection without the enterprise price_

_For flexible per-user pricing, PhishProtection’s integrated email security solution protects your employees from business email compromise (BEC) and many other email threats. 24×7\. On any device. With features you’d expect in more expensive solutions:_

_**All Plans Come With**_

_- Stops business email compromise (BEC)_
_- Stops brand forgery emails_
_- Stop threatening emails before they reach the inbox_
_- Continuous link checking_
_- Real-time website scanning_
_- Real time alerts to users and administrators_
_- Protection with settings you control_
_- Protection against zero day vulnerabilities_
_- Complete situational awareness from web-based console_

## Protect your inbox from phishing attacks

Start your 60-day free trial - no credit card required.

[Start Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection)

```json
{"@context":"https://schema.org","@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"21","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/phish-protection/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"Phish Protection","url":"https://phishprotection.com","description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
{"@context":"https://schema.org","@type":"Article","headline":"Email Impersonation Protection","description":"Email Impersonation Protection PhishProtection Technology Protects Against Email Impersonation The email impersonation challenge","url":"https://phishprotection.com/email-impersonation-protection/","dateModified":"2023-07-21T11:35:28.000Z","author":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection"},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://media.mailhop.org/phishprotection/images/phishprotection-logo.png"},"description":"Enterprise-grade email security that protects businesses from phishing, ransomware, and email fraud with real-time threat detection and multi-layered protection.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://phishprotection.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897912","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Ransomware Protection","Business Email Compromise","Time of Click Protection","Advanced Threat Defense","Email Fraud Prevention","Phishing Awareness Training","Office 365 Email Security"]},"image":"https://media.mailhop.org/phishprotection/images/og-default.png"}
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://phishprotection.com/"},{"@type":"ListItem","position":2,"name":"Email Impersonation Protection","item":"https://phishprotection.com/email-impersonation-protection/"}]}
```