The Email That Wasn’t
The Email That Wasn’t: How a Simple Scam Cost £100,000
It looked routine: the logo was perfect, the tone familiar, and the request urgent but reasonable.
“Please process this payment today.”
The finance team acted quickly. After all, it came from the boss.
Except it didn’t.
By the time anyone realised, £100,000 had vanished. No malware. No system breach. Just a clever impersonation.
And the worst part? It could have been stopped with simple measures: DMARC/DKIM and DCIM.
DMARC & DKIM: Your Email Gatekeepers
Email remains the number one attack vector for fraud. Criminals exploit trust by impersonating your domain.
Here’s how to stop them:
- SPF – Confirms emails come from approved servers.
- DKIM – Adds a cryptographic signature to prove authenticity.
- DMARC – Enforces the rules and reports suspicious activity.
Think of your domain as your company’s front door. Without DMARC and DKIM, anyone can walk in wearing your uniform. With them, you’ve got a guard checking IDs and signatures.
Together, they block impersonation attacks like invoice fraud and CEO scams.
DCIM: The Engine Room Monitor
While DMARC and DKIM protect your email identity, DCIM (Data Centre Infrastructure Management) safeguards the backbone of your IT—servers, power, cooling, and networks.
Imagine your data centre as a ship’s engine room. DCIM is the dashboard that spots problems early, prevents downtime, and keeps costs under control.
- Visibility – Real-time monitoring of critical systems.
- Efficiency – Optimises power and cooling to reduce waste.
- Resilience – Detects issues before they become outages.
Why It Matters
- Reputation – One phishing attack can destroy trust.
- Financial Security – Stops fake payment requests.
- Compliance – DMARC for email standards; DCIM for operational audits.
Don’t “Set and Forget”
Cyber security and infrastructure management aren’t static. Misconfigured DMARC or ignored DCIM leaves you exposed. Regular reviews are essential.
Your Next Step
- Is your domain protected with DMARC and DKIM?
- Can you see what’s happening in your IT infrastructure?
- Are you confident about compliance?
Get peace of mind with a free domain check from Lugo. No strings attached.





