Stop business email compromise and executive impersonation
SpamFoo catches mail that pretends to come from your CEO, your vendors or your IT desk. It protects the names your staff trust and spots domains built to look like ones you know.
01Protected identities
Catch the "CEO" who writes from a free mail account
Many phishing emails have no bad link at all. They use a name the reader trusts and ask for a wire transfer, new bank details or gift cards. Tell SpamFoo who your important people are and where they really send from. Mail that uses one of those names from anywhere else is marked as phishing.
- Catches the name written differently, such as "Jones, Pat" or "Pat Jnoes"
- Catches names spelled with look-alike characters
- Each domain admin manages the list for their own people
02Look-alike domains
Spot domains built to look like ones you trust
Phishers register domains one letter off from a real one, or swap in characters from other alphabets that look the same as English letters. A Cyrillic "о" and a Latin "o" are different characters that look identical on screen. SpamFoo reduces each domain to how it looks and compares it with well-known domains and with your approved senders.
- Missing, doubled and swapped letters
- Characters such as 1 for l, 0 for o and rn for m
- Letters from Cyrillic, Greek and other alphabets
- The same name on a different ending
03Links and wording
Stop fake sign-in pages and requests for passwords
Links are checked against a list of known phishing sites that updates throughout the day. A phishing model also reads the message for the signs of credential theft, such as a warning that an account will be closed unless the reader signs in.
What changes for your team
Fewer fake invoices reach finance
Requests to change bank details from a look-alike vendor domain are marked as phishing before anyone acts on them.
Stop mail that pretends to be your staff
Add the people attackers like to copy, such as your owner, your payroll contact and your IT desk. Mail that uses those names from another address doesn't reach the inbox.
See why each message was marked as phishing
The dashboard shows whether a message was caught for impersonation, a look-alike domain or a known phishing link. When someone asks why a message was blocked, the answer is already there.
Protect the names your staff trust
Start a free trial, add your first protected identities and see what Anti-Phishing catches on your own mail.