I am taking care of a website like
example.com. The company is using the email on the same domain (as you'd expect), like
Unfortunately, someone has created an address like
firstname.lastname@example.org, the same domain, and started sending bills and stuff to other people (clients or related to the company) and it is obviously hurting the business.
I've tried to contact the hosting company but they keep saying that it is not their fault because people clone email addresses and they have nothing to do with this.
What can I do about this? Is this a problem from the hosting company or are they right that any address can be cloned? I was not aware of this but I have a feeling this is not entirely true.