---
title: "Email security and anti-phishing"
description: "Advanced filtering, SPF, DKIM and DMARC configured properly, plus staff training. Email is how most incidents enter small and medium companies."
url: "https://doctor-pc.ro/en/protectie-email-antiphishing"
category: "cyber"
language: "en-GB"
publisher: "Doctor PC Digital Solutions SRL"
---

# Email security and anti-phishing

Email remains the main way in. Not because filters are weak, but because a well-written message sent at the right moment fools a busy person. Both sides need work.

## What is included

- **Advanced filtering** — Blocking dangerous messages before they reach the inbox, including links that turn malicious after delivery.
- **SPF, DKIM and DMARC** — Configuring the domain correctly so nobody can send mail in your company's name. It also protects deliverability.
- **Fraud protection** — Detecting messages that impersonate management or a supplier in order to obtain a payment or a change of bank details.
- **Team training** — Short sessions and phishing simulations. People learn from concrete examples, not from slide decks.
- **Incident procedure** — What someone who clicked should do. Speed of reaction matters more than blame.
- **Exposure report** — How many messages were blocked, how the team responded to simulations, where attention is still needed.

### Bank-details fraud

The most expensive attack type for small companies involves no malware at all. Someone watches a conversation, then sends an invoice with different bank details at just the right moment, from an address almost identical to the real supplier's.

Filters help, but the real defence is a simple procedure: any change of bank details is confirmed by phone, on a number known in advance. We agree it together and train for it.

### Domain authentication

Without SPF, DKIM and DMARC configured correctly, anyone can send mail that appears to come from your company. Beyond the fraud risk, it damages your domain reputation and pushes legitimate mail into spam.

## Frequently asked questions

### We have Microsoft 365, it already filters.

It does, and it is decent. What is usually missing is correct domain configuration, impersonation fraud protection and the training side. We check what you have and add only what is missing.

### Don't phishing simulations upset staff?

It depends how they are run. The point is not to catch someone out, but for people to recognise the pattern. Results are discussed in aggregate, not by name.

### Do we have to change email provider?

No. We work on top of what you have — Microsoft 365, Google Workspace or your own server. The configuration changes and filtering is added; the addresses stay.

### What are SPF, DKIM and DMARC?

Three DNS records that tell the world who is allowed to send mail on behalf of your domain. Configured properly, they stop someone writing to your clients as if they were your company.

## Let's work out exactly what you need.

We look at the current situation, tell you what is worth changing and what can wait, then you get a quote with clear figures.

## Request a conversation

Write us a few lines about the situation in your company and we will come back with a concrete proposal.

*Form on the page. Alternatively: phone +40 770 767 226 or office@doctor-pc.ro.*

## Other services

We cover the whole chain, from infrastructure down to repairing a single device.