Suspicious mail from your domain
Portal alerts or calls: “You sent us a virus.” Stay calm. Separate two questions: was only the sender forged, or did the mail really leave your systems?
External comms
- Short clear note: do not open attachments/links; delete the mail.
- Use a channel customers already trust — not a reply to the suspicious message.
- Avoid panic wording that itself looks like phishing.
Tech in parallel
- Domain traffic light: missing DMARC? → check
- Mailbox: Sent folder, rules, MFA → checklist
- Keep one original .eml
Start free