Mainsprout

Find out if scammers can send email that looks like it's from your business.

We email you a private report in plain English: what's protected, what isn't, and exactly how to fix it. Do it yourself with our steps, or have us do it for you for a one-time $149 per domain.

Your results are never shown on our site. They only go to an email address at your business's own domain.

Free, private, and safe

No passwords, no logins, nothing installed. We check what scammers can already see from the outside.

Works for small businesses anywhere. It's all done online.

How it works

1. RequestTell us your business, website and your email at that domain.
2. We checkWe look at your domain's public email security settings.
3. You get resultsA private, plain-English report arrives at your business email, with exactly what to fix, if anything.

What we check

SPF

Who's allowed to send email as you.

DKIM

A digital signature that proves your emails are really from you.

DMARC

What inboxes should do with fakes, and whether you hear about them.

MX

Where your email is delivered.

Why this matters

Scammers don't need to hack you to pretend to be you. If your domain isn't protected, they can send email that looks like it came from your business.

$3.05 billion

Reported losses to business email compromise in 2025. It was the second-costliest crime type the FBI tracked, after investment fraud.

Source: FBI IC3, 2025 Internet Crime Report

24,768 complaints

That's how many business email compromise complaints reached the FBI in 2025, up from 21,442 in 2024. The average reported loss was about $123,000 per complaint. Nearly 68 businesses report these scams to the FBI every day, and many more never report them.

Source: FBI IC3, 2025 Internet Crime Report

“Small local businesses to larger corporations”

The FBI says this is who these scams target. It has counted $55.5 billion in exposed losses worldwide from 2013 to 2023.

Source: FBI PSA I-091124-PSA, “Business Email Compromise: The $55 Billion Scam”

Gmail and Yahoo now check

Since February 2024, Gmail and Yahoo require every sender to have SPF or DKIM. Bulk senders also need DMARC. Email that fails these checks can be sent to spam or rejected.

Source: Google Email sender guidelines · Yahoo Sender Requirements

Find out where your domain stands in a couple of minutes.

Your private report goes only to an email address at your own domain.

These protections stop scammers from sending email as your exact domain. They don't stop every kind of fraud, like a stolen password or a look-alike domain.

Need it fixed?

Available now

Email Security Setup

$149 one-time, per domain

We set up SPF, DKIM and DMARC for one business domain, so scammers have a harder time sending email that looks like it's from you, and your real email is more likely to reach the inbox. Done online, wherever you are.

New: is AI recommending you?

Free

Free AI visibility check

Find out if ChatGPT and Google's AI recommend you. We check whether your business gets named when customers ask for your kind of business in your area, and whether what AI says about you is right. Private report by email, no logins needed.

Questions

Is the email security check really free?

Yes. The check and the report are free, with no obligation. If something needs fixing, you can fix it yourself or hire us.

Can I fix it myself?

Yes. Your report lists exactly what to change, step by step, in plain English. Many owners hand it to their web or IT person. If you'd rather not deal with it, we'll do it for you for a one-time $149 per domain.

What do you check?

Four public email settings on your domain:

  • SPF: who's allowed to send email as you.
  • DKIM: a digital signature that proves your emails are really from you.
  • DMARC: what inboxes should do with fakes, and whether you hear about them.
  • MX: where your email is delivered.
Do you need my passwords or access to my accounts?

No. No passwords, no logins, nothing installed. We check what scammers can already see from the outside.

Who sees my results?

Only you. Your results are never shown on our site or anywhere public. We send them only to an email address at your business's own domain (like you@yourbusiness.com), so a stranger can't look up another business's weak spots.

Why can't I use a Gmail or Yahoo address?

Sending the report only to an address at the business's own domain shows it's going to someone at that business. It's how we keep results private.

What does the $149 Email Security Setup include?

For one domain, we set up or fix SPF, DKIM and DMARC for up to 3 services that send email for you, such as your main email plus a booking or billing tool. We get your written OK before each change and send you a summary when we're done. If you have more than 3, we quote the extra cost in writing before you pay.

Do you work with businesses outside St. Louis?

Yes. We work with small businesses anywhere. The check and the setup are done online, by email and a short call or screen-share.