Can a scammer pretend to be your business?
Free check in about a minute. We look only at public information.
Check your email - your report is on the way.
It has your A to F grade and a list of what to fix first. If you do not see it soon, look in your spam or promotions folder.
Fake emails and fake invoices cost real money
lost to business email compromise in 2025, as reported to the FBI.
Source: FBI, 2025 IC3 Annual Report (PDF, opens in a new tab), the FBI's yearly report on internet crime. Business email compromise ranks second among the cyber-enabled fraud types in its top-five loss chart.
Business email compromise is when a criminal pretends to be a company, a vendor or a boss by email. They ask for a payment, a gift card or a change of bank details.
The fake often looks real. It can come from a web address that is one letter off from yours, or from a mail system that was never set up to stop fakes. Your customers, your staff and your vendors can all be the target.
The first step is to see what a criminal sees. That takes about a minute.
Five checks, one grade
Everything we look at is public. We never log in to anything.
Can someone send email as you?
Three records in your domain settings decide who may send email with your name on it. SPF lists the servers allowed to send. DKIM adds a signature that shows a message is real and was not changed. DMARC tells other mail systems what to do with fake mail.
If they are missing or weak, a criminal can more easily send mail that looks like it came from you. We check all three.
Lookalike web addresses
A criminal can register a name that is one letter off from yours, like yourbusness.com or yourbusiness.co. We try the common typos, swaps and endings.
We list the ones that are registered, the ones set up to send email, and any registered in the last 90 days.
New lookalike website certificates
A fake website usually gets a padlock certificate, and those certificates are listed in public records. We search those records for names close to yours, so a fake site can show up early.
Your Google listing
We find your Google listing and check that the phone number and website are the real ones.
We also look for a second listing with the same or a near name and a different phone number. That can be a sign of a fake or hijacked listing.
Domain expiry and lock
If your domain runs out, or the lock at your domain company is off, someone else can take it more easily. We check your expiry date and whether the lock is on.
Your result: one grade, A to F
A means hard to fake. F means easy to fake. You also get a short list of what to fix first.
Start free. Fix it with a guide.
The scan is free. If you want help fixing what it finds, the Guided Fix gives you the steps. Monitoring keeps watching after that.
Free scan
See your grade and what to fix first.
- An A to F grade for your business
- The five checks, in short sentences
- A list of what to fix first
- Public information only. No logins.
Takes about a minute.
Guided Fix
A step-by-step guide made for your email and your domain.
- A personalized step-by-step guide for your email and your domain host, built from your scan
- The exact records to paste, ready to copy
- A re-check to confirm your new grade
- A one-page staff call-back rule for payment and bank-change requests
- The top lookalike domains to buy (you buy them, at your own cost)
You follow the guide yourself, or hand it to whoever runs your email and website. We never log in to your accounts. Guide arrives by email within 1 business day.
Monitoring
We keep watching, so you do not have to.
- A weekly re-scan
- An alert if a new lookalike domain or certificate shows up
- An alert if your Google listing phone or website changes
- A monthly summary
- Cancel anytime
Pay with card, Apple Pay or Google Pay.
Straight answers
Do you touch my systems?
No. The scan uses public information only: your public email and domain records, public lists of website certificates, and your public Google listing. We never ask for a password and we never log in to anything. The paid fix is a guide that you follow yourself, or hand to whoever runs your email and website.
Will this break my email?
That is why the guide goes slowly. It starts email protection in monitor-only mode, so your email keeps working while you see who sends mail as you. After 2 to 4 weeks of clean reports, the guide shows you how to tighten it.
Is this a guarantee?
No. It makes your business much harder to fake. It does not stop every scam. Criminals can still use other tricks, such as a fake text message or a hacked account.
Is there a refund?
If you follow the guide and your email grade does not improve, email us within 30 days of purchase for a full refund. Write to hello@project5pi.com.
Can you get back money I already lost?
No. Anyone who charges a fee to recover lost money is usually running a second scam. If you lost money, call your bank right away and report it to the FBI at ic3.gov. The FBI's 2025 annual report shows how these crimes work.
Who sees my info?
Only our team and the services we use to run your scan and send your email. We use your website address, business name, town and email to run the scan and send your report. We do not sell your information. Our privacy page has the details.
Could a scammer pretend to be you?
Find out in about a minute. Free, and public information only.