Free · no account · about a minute

Is someone sending email as your business?

Type your web address. You'll know in about a minute, and the fix comes written out for you. It's called spoofing

The address your business owns, like yourbusiness.com, not gmail.com. We never sign in to anything of yours.

Answers in seconds Nothing to install Public records only

Been here before? Sign in. We'll email you one link that opens everything we hold for your address.

What this looks like

On September 23rd, someone tried to send an email pretending to be us.

One message, claiming to come from atxworks.dev, sent from a consumer network in Peru. Our fix made sure it was refused before it reached anybody.

Almost nobody has turned this on.

$3.05B

lost to business email fraud in 2025, in cases reported to the FBI.

30.4%

of 5.5 million of the world's busiest domains have the setting at all.

12.8%

have it set strongly enough to turn a forged email away.

Sources: FBI IC3 2025 Annual Report; DMARCguard, February 2026 scan of 5,499,028 Tranco domains.

How it works

Three steps.

1

Type your web address

We read public records: your DNS settings, certificate logs, domain registrations. Nothing gets installed, and we never touch your systems.

2

Read the answer

Two plain questions answered, the addresses we found, and the first fix written out in full. Free, whether or not you ever buy anything.

3

Fix it, or we do

Hand it to whoever manages your email. Or have us make the change ourselves, spread over 60 to 90 days and checked against the reports at each step.

I was sent something odd. Is it real? A customer asked me if an email was real Everything the free plan includes

Pricing

Do it yourself, or hand it over.

The check and the full plan are free, no strings. If you'd rather not deal with it, we will.

You do it
Check your business, and get the written plan
Free
  • Free Forever, for as long as it's useful to you
  • The full check, as often as you like
  • The written plan, yours to keep
  • The exact settings to paste, written for your web address
Check My Business
Free tool
Check an email you're not sure about
Free
  • Free Forever, for as long as it's useful to you
  • Paste only the top part, never what it says
  • Take your own address out first if you like
  • Nothing is stored, and there's no account
Check an Email
Want Us to Handle It?

Fix $1,500 · Watch $199 a month

We never see your email. On any of these. The reports show which servers sent in your name and how many, never what was written or the address it went to. More than one domain, or a team? Talk to us.

Why this exists

We learned the hard way.

Two businesses we ran closed after our email addresses were spoofed and used in someone else's scheme. We didn't know that was possible until it had already happened.

So we built CopycatCheck. The first domain we ran it on was our own, atxworks.dev. It found atxworks.net, registered to someone else. We don't know who, and we won't guess. We only ever email from atxworks.dev.

More About Our Why

Then

What that looked like

atexasnotary.comSpoofed
What they used it forTo spoof mc2co.co, our other business
Protection in placeNone. We didn't know it existed.
Warning we receivedNone
Both businessesClosed

Nobody broke in. They never needed to.

Now

What it looks like now

atxworks.netNot Ours
Mail recordsPoint at the registrar's own mail service
WebsiteNone, a "site not found" page
OwnerHidden by a privacy service
Email as atxworks.devForgeries rejected

The look-alike still exists, because that part isn't ours to control. What's ours is closed: nobody can forge our exact address, and our clients know we only email from atxworks.dev.

Still wondering? It takes a minute.

Check My Business

Questions

The ones people ask.

What's the catch? Why is the plan free?
There isn't one. Two businesses we ran closed because of exactly this, and the fix was tedious rather than difficult. So the finding, the plan and the tools are free, and they stay free. If the work turns out to be more than you want to carry, we're here and we charge for that. The whole story.
Can you stop someone sending email as me?
Nobody can stop them trying, and they will. What stops is their use of your name: once your settings are at their strongest, a message forging your exact address is turned away at Gmail, Microsoft, Yahoo and most others. And you see them try. The reports the big mail providers send name each attempt, the network it came from, and that it was refused. Not every mail system honours the setting, which is why the plan includes a note for your customers too.
Will fixing this break my email?
It can, if it's done in one step. Your invoicing tool, your CRM and your newsletter all send mail using your name, and switching enforcement on carelessly starts bouncing them. That's why the plan runs over 60 to 90 days: find every sender first, then tighten in stages.
Do you need access to my systems?
No. Never for the check, never for the plan. Everything comes from records that are public by design. If you hire us for the managed change, you give us access to one thing, your DNS settings, and only after a signed agreement that says exactly what we'll change.
What if you find nothing?
Then you'll read a page that says so, listing every version we checked and confirming your address is set to refuse forgeries. That's a good day, and worth knowing.

Something we haven't answered? Get in touch, or read how we check and the free tools.

Spoofing

Sending an email that shows your real address as the sender, without ever getting into your account. Nothing is hacked and no password is stolen.

Unless your web address tells mail providers to refuse it, the message is delivered like any other. One setting closes that door, and the check tells you whether yours is open.