Email security
Stop the email that looks exactly right
The most damaging emails don’t contain viruses. They contain a convincing request: “Our bank details have changed”, “Can you buy some gift cards?”, “Please sign in to view this document.” We filter, flag and authenticate email so those messages are stopped or clearly marked before anyone acts on them.
- Microsoft Partner
- Cyber Essentials certified
- 5.0 on Google
Business email compromise
How invoice fraud actually happens
Criminals either break into a real mailbox, often a supplier’s, or register a domain one letter different from it. They read past conversations, wait for an invoice to be due, and send a perfectly timed message with new bank details. The email looks right because, in many cases, it comes from a real account.
Stopping it takes more than a spam filter. It takes impersonation detection, authentication of your own domain, MFA on every mailbox, and a simple rule that bank-detail changes are confirmed by phone.
Anatomy of a fraud attempt
What the filter checks
- Sender domain age & spelling Checked
- Display name vs real address Checked
- Attachments detonated safely Checked
- Links rewritten & scanned on click Checked
What’s included
Email protection in layers
-
Advanced filtering
Spam, malware, phishing and malicious links caught before delivery, with suspicious attachments opened safely in a sandbox.
-
Impersonation protection
Warnings when someone pretends to be your director, a colleague or a known supplier.
-
External warning banners
A clear banner on emails from outside the business, so a “colleague” writing from Gmail stands out.
-
SPF, DKIM & DMARC
Your domain authenticated properly, so criminals can’t send email that appears to come from you.
-
Mailbox security
MFA, blocked auto-forwarding to outside addresses and alerts on suspicious inbox rules.
-
People, trained
Short training and simulated phishing so staff know what to report, and how.
One simple rule
Never change bank details on the strength of an email
Technology stops most fraud attempts. A process stops the rest. We encourage every client to adopt one rule: any request to change payment details is confirmed by calling a number you already hold, not one in the email.
FAQ
Email security questions
Can’t see your question? Call 01843 482 279 or email hello@squareoneit.co.uk. You’ll get a straight answer from an engineer.
Doesn’t Microsoft 365 already filter email?
It includes baseline protection, which catches a lot of spam and known malware. Advanced filtering adds impersonation detection, link scanning at the moment of click, attachment sandboxing and better visibility, which is where modern phishing gets through.
What is DMARC and do we need it?
DMARC tells receiving mail servers what to do with email that claims to come from your domain but fails authentication. Set up properly with SPF and DKIM, it stops criminals spoofing your address, and major email providers now expect it.
Will genuine emails get blocked?
We tune the filtering for your business and review quarantines, so false positives are rare and easy to release.
Is email security included in your plans?
Email security management is included from the Business plan (£28 per device per month, excluding VAT) upwards.
Can someone send email as you?
We’ll check your domain’s SPF, DKIM and DMARC records and your Microsoft 365 mail settings for free, and tell you what’s missing.
- Domain spoofing check
- Mailbox rules reviewed
- No obligation
- Call the team01843 482 279
- Emailhello@squareoneit.co.uk
- VisitKent Innovation Centre, Thanet Reach Business Park, Broadstairs CT10 2QQ
- Helpdesk hoursMonday to Friday, 9am – 5pm