Stop Criminals
Impersonating You
Cybercriminals impersonate your business to defraud your customers, suppliers, and partners. Antivirus can't stop it, but Oxana can.
We protect your domain using industry-leading email security standards: SPF, DKIM, DMARC, TLS, and MTA-STS, so only legitimate emails ever leave your domain.
Brand & Invoice Fraud Protection
Stop criminals from impersonating your business
Prevent Invoice Fraud
Cyber criminals spoof your domain to send fake invoices to your customers and suppliers. We stop them from acting as you, protecting your business relationships from financial fraud.
Protect Your Brand Reputation
When attackers send malicious emails pretending to be your company, your brand takes the damage. Our authentication ensures only legitimate emails leave your domain, maintaining trust with partners.
Shield Your Contacts
Your customers and suppliers trust emails from your domain. We ensure that trust isn't exploited by nefarious actors sending phishing or malware in your name.
The Scale of Impersonation Attacks
Impersonation via email is the #1 attack vector globally, and most businesses have no defences against it.
of cyberattacks start with a phishing email
Email impersonation is the leading attack vector globally
Lost annually to Business Email Compromise (BEC)
Antivirus protection against outbound email spoofing
Why Most Businesses Are Exposed
Your firewall and antivirus protect you from incoming threats. But they do nothing to stop someone impersonating you.
Antivirus Doesn't Cover It
Traditional security tools protect against malware and incoming threats. They do nothing to stop someone spoofing your domain and sending fake emails that appear to come from you.
Your Domain is Your Identity
If attackers can impersonate your brand via email, your customers and partners may fall victim, and your reputation takes the damage.
Unauthenticated Domains Are Easy Targets
Without SPF, DKIM, and DMARC in place, anyone can send email claiming to be from your domain. Proper configuration closes that door.
The Email Security Standards We Deploy
Impersonation prevention is built on three foundational email authentication standards. We configure and manage all of them for you.
Sender Policy Framework
SPF is a DNS record that specifies which mail servers are authorised to send email on behalf of your domain. When an email arrives, the receiving server checks the SPF record to verify the sending server is on the approved list. If it's not, the email can be rejected or flagged.
DomainKeys Identified Mail
DKIM adds a digital cryptographic signature to outbound emails. The receiving server validates this signature against a public key published in your DNS. If the signature doesn't match, the email may have been tampered with in transit.
Domain-based Message Authentication, Reporting & Conformance
DMARC ties SPF and DKIM together and tells receiving servers what to do when either check fails, quarantine, reject, or allow the email. It also provides reporting so you can see who is sending email on behalf of your domain.
Encryption in Transit
Beyond authentication, encryption ensures emails can't be intercepted as they travel between servers.
TLS encrypts the connection between mail servers, protecting emails in transit from being intercepted or read by third parties. It's the equivalent of a secure HTTPS connection, but for email delivery between servers.
MTA-STS is a policy standard that tells sending servers to only deliver email to your domain over encrypted TLS connections. Without it, email can be "downgraded" to an unencrypted connection, making it vulnerable to interception.
How Oxana Stops Impersonation
We handle everything, from auditing your current vulnerabilities to deploying and managing a complete impersonation prevention stack.
Domain Assessment
We audit your current SPF, DKIM, and DMARC configuration to identify gaps and vulnerabilities.
Managed Deployment
Full setup and enforcement of all authentication records, tailored to your email environment.
Ongoing Monitoring
Continuous visibility into who is sending email on behalf of your domain, and alerts when something looks wrong.
Reporting & Insights
Clear, actionable reports showing authentication pass rates and threat activity.
Microsoft 365 Aligned
Fully integrated with your Microsoft 365 environment for seamless configuration.
Sendmarc Platform
Backed by Sendmarc's industry-leading DMARC management platform for enterprise-grade protection.
Frequently Asked Questions
Common questions about impersonation prevention and email authentication.
What is DMARC and why does my business need it?
DMARC (Domain-based Message Authentication, Reporting & Conformance) is a DNS policy that tells receiving mail servers what to do when emails fail SPF or DKIM checks, quarantine them, reject them, or let them through. Without DMARC, anyone can send emails that appear to come from your domain. This is the #1 method used in invoice fraud and BEC attacks.
Will implementing DMARC break our email?
If deployed correctly, which is our specialty, no. We start with a monitoring-only policy to identify all legitimate senders, then progressively enforce the policy once we're confident nothing will be disrupted. Rushing this step causes problems; our managed approach prevents them.
We already have Microsoft 365, doesn't that protect us?
Microsoft 365 includes inbound email filtering (anti-spam, anti-phishing), but it does not automatically configure outbound email authentication records like SPF, DKIM, and DMARC for your domain. These need to be correctly set up in your DNS, which is exactly what Oxana handles.
How quickly can you protect our domain?
Initial SPF and DKIM configuration is typically completed within 1 to 2 business days. Full DMARC enforcement (moving from monitoring to quarantine/reject) is a 4 to 6 week process to ensure no legitimate email is disrupted.
What is the Sendmarc platform?
Sendmarc is an industry-leading DMARC management platform that Oxana uses to provide enterprise-grade visibility, reporting, and ongoing management of your email authentication posture. It shows exactly who is sending email on behalf of your domain in real time.
How do I prevent invoice fraud and business email compromise?
Business email compromise protection and invoice fraud prevention require three layers: email authentication (SPF, DKIM, and DMARC) to stop spoofing, mailbox hardening to stop attackers reading your mail, and staff controls to verify new bank details out-of-band. Oxana delivers a complete business email compromise protection service for Sydney and Australian businesses, configuring DMARC enforcement, setting up alerts for spoofing attempts, and training finance teams on CEO fraud and email impersonation attack patterns.
What is a DMARC setup service and why do I need it?
A DMARC setup service configures the DMARC DNS record and the underlying SPF and DKIM records so receiving mail servers can authenticate your email and reject spoofed messages. Oxana runs a managed DMARC setup service, starting in monitoring mode, identifying all legitimate senders, then moving to quarantine and reject enforcement, providing email spoofing protection that stops invoice fraud and brand impersonation at the source.
Could Someone Impersonate Your Business Right Now?
Get a free assessment and find out if your domain can be spoofed, before attackers find out first.
Book a Free Assessment