SPF record is missing

What does this mean?

Without an SPF record, mail servers receiving email that claims to be "from" your domain have no way to verify it was actually sent by a system you authorized. That makes it easier for scammers to send convincing phishing emails that appear to come from your company.

What are the potential impacts?

• Scammers can send phishing emails that appear to come directly from your company's domain, with no technical hurdle stopping them.
• Employees, customers, and vendors targeted this way often trust the email because it looks like it's really from you, leading to wire fraud, credential theft, or malware installed on a partner's machine.
• Even if you never notice the abuse yourself, your domain's reputation with mail providers can degrade, eventually causing your own legitimate emails to land in spam.