Email spoofing explained simply

Guides

With spoofing, the From line looks like info@your-company.com even though the message did not leave your mailbox — like a fake return address on an envelope.

Why it works

Classic email did not strictly verify senders. Without DMARC, forged From addresses can still be delivered.

What to do

1. Check domain protection (especially DMARC).
2. Tell customers you never change bank details via surprise email.
3. If it might be a real account: hack checklist.