Spoofed Email: The Other Side

It was interesting when I showed up at work and found an undeliverable email that I had not sent. After a bit more research I discovered our office email is being spoofed in order to try to scam people (Please make note of this! Not all emails that claim to be from the church office are actually from the church office until we work this out.)

Here’s what to look for if it ever happens to you (not all spoofed emails are from businesses or organizations).

The email address kadipolo87@gmail.com has never been used from the office email. Yet when I get a delivery status like this it is specifically claiming to have come from the church email.

The following image shows that not only did it not come from the church email, but proves we are currently being spoofed.

When you see the DMARC result as “fail” and SPF result as “none” the recipient’s email server recognized that office@stjosephlakewood.org was not authenticated. In other words, it isn’t us who sent that email.

Always double check any email you get from office@stjosephlakewood.org. We don’t ask for gift cards, money, crypto or bank transfers. If you are unsure whether the email is genuine or not, please call the office! I would be more than happy to verify whether I sent it or not.