Forward it.
Search it.
Verify it.

Ask the network: has anyone seen this?

Search a sender, domain, subject line or campaign. Sender Registry checks what the network has seen before, related campaigns, risk history and connected infrastructure. It shows its full record, not just a single verdict.

A sender we've never seen before is never automatically marked safe. Human beings have already invented enough ways to abuse a green tick.

Verify before your business acts.

Changed bank details. An "urgent" payment request. A supposed supplier instruction. Sender Registry runs a focused check for supplier impersonation, lookalike domains, unusual sender relationships and campaign history. Because the time to spot invoice fraud is before the money moves, not after.

Recurring monitoring, not a one-off check.

Supplier Watch monitors the businesses you trust. Executive Watch looks for external emails impersonating your directors and finance staff. Brand Watch tells you when someone is pretending to be your company. Domain Lookalike Radar watches for confusingly similar domains, before anyone's been phished with them.

My Exposure shows campaigns and threats connected to your organisation specifically. Not generic threat news. Threats Like Yours highlights activity being reported by similar businesses right now.

Getting cryptic DMARC reports you cannot read? We turn them into plain English.

Once you set up DMARC, providers like Google start emailing you daily reports as compressed XML files. They are written for machines, so most people open the ZIP, see a wall of tags and IP addresses, and give up. Buried in there is genuinely useful information: who has been sending mail as your domain, and whether anyone is trying to spoof you.

Upload one and we read it for you. You get a plain-English verdict, the real services sending as your domain (Google, Microsoft 365, Resend and more, named for you), whether SPF, DKIM and DMARC passed, an A to F grade for your domain's own setup, a flag on any sender our network already knows to be bad, and whether anything needs your attention. Free, no account needed, and we never store your file.

Want it watched for you? On a paid plan we ingest your DMARC reports automatically, keep a running history of who is sending as your domain, and alert you the moment a new sending source appears or your authentication rate drops. Correlated and Verified add your registered suppliers' and brands' domains too.

The fake of your brand, spotted before it’s ever used against you.

A convincing fake of your domain is often registered well before it sends its first email: a swapped letter, a hidden Cyrillic character identical to a Latin one, or an added word like secure or billing. By the time a fake invoice reaches an inbox, the fraud is already moving. Most protection only reacts once someone reports the fake.

For every brand domain you add to Business Watch, Sender Registry generates the lookalikes an attacker is most likely to register, and watches for any of them appearing. It also monitors public certificate transparency logs, where a new site’s security certificate is published, often before the site is even live. The moment a match is found, you learn whether it can already send email as you or serve a live page, so you know exactly how seriously to take it.

Stand out as a verified sender.

Verify your domain once and earn a verified badge for your website and email signature, plus your own public verified record. It is a credibility signal that gives visitors and clients extra confidence they are dealing with the genuine you, not a lookalike.

When someone forwards one of your emails to Sender Registry to check it, we tell them whether it genuinely came from your verified domain. If anyone starts using your name to impersonate that domain, you learn about it straight away. Verifying is optional and takes a couple of minutes, and not being verified is never held against you.

Not every fraudulent email is fake. Sometimes it really is them.

The most damaging invoice fraud does not come from a lookalike address. It comes from a supplier you have trusted for years, whose real email account has quietly been taken over. The message is genuine, sent from their genuine address, which is exactly why it works and why an ordinary phishing check waves it through.

When several organisations start reporting fraud from a domain one of them has registered as a trusted supplier, Sender Registry recognises the pattern and warns you the account may be compromised, so you verify by phone before paying anything. We never blocklist a compromised legitimate domain, because it will be cleaned up and back to normal.

Is this spam, or is it dangerous? Those are two different questions.

A newsletter you are tired of and an invoice-fraud attempt are both "unwanted email", and that is where the similarity ends. Most tools collapse them into one score, so a harmless mailing list and a genuine attack end up sitting next to each other looking roughly the same.

Sender Registry answers both, separately. Every email you forward still gets its danger verdict exactly as before. Alongside it, we now say what kind of mail it was: a real person writing to you, a receipt you expected, bulk marketing, cold sales outreach, or junk. Being bulk never raises the risk score, because bulk is not an accusation.

Then we ask you one question: did you want it? That answer is the part no classifier can guess, because only you know what you signed up for. When enough separate organisations tell us the same thing about a sender, that sender becomes a known bulk source across the whole network, and we show the working: how many organisations, and what share of them said so.

Where it is safe to do so, we can unsubscribe you. Where it is not, we say so and stop. An unsubscribe link on a dangerous email is not an unsubscribe link: it is confirmation that a real person read the message.