I am taking care of a website like example.com
. The company is using the email on the same domain (as you'd expect), like user@example.com
.
Unfortunately, someone has created an address like person@example.com
, the same domain, and started sending bills and stuff to other people (clients or related to the company) and it is obviously hurting the business.
I've tried to contact the hosting company but they keep saying that it is not their fault because people clone email addresses and they have nothing to do with this.
What can I do about this? Is this a problem from the hosting company or are they right that any address can be cloned? I was not aware of this but I have a feeling this is not entirely true.
From
field of an email if that is what is happening. SPF and DKIM should be implemented, if not already, to help with this. However, I don't see how they can can't create a mailbox without "someone on the inside"? And presumably "they" will not be able to pickup email sent to this address - they are just using it to "send"? However, if these emails are being sent to "clients" then it sounds like an "inside job" or the company is being specifically targetted?!