If you run a home improvement business, the emails you send to customers \u2014 quotes, invoices, appointment confirmations \u2014 may be easier to fake than you think.<\/p>\n\n\n\n
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a short DNS record that tells inboxes like Gmail and Outlook what to do with email that claims to come from your domain but can’t prove it. Without one, inboxes have less to go on when deciding whether your email is real or an impersonation attempt.<\/p>\n\n\n\n
Diib looked at the most recent email-authentication check for each website it scanned between July 1 and September 28, 2026. Across 276 home improvement websites:<\/p>\n\n\n\n
Plumbing websites, a sub-group of home improvement, looked similar: 51% of 173 sites had no DMARC record.<\/p>\n\n\n\n
This is a snapshot of aggregated Diib website data, not a survey of every contractor online. It shows how often the record is missing. It doesn’t show that any particular business has been spoofed or that its emails are landing in spam. The gap is also probably not about carelessness. Many trade businesses set up email once, through a web designer or domain registrar, and never revisit the DNS settings.<\/p>\n\n\n\n
Still, email is how many home improvement businesses send estimates and collect payments. That makes a missing DMARC record a small setup gap with outsized consequences if someone decides to send fake invoices in your name.<\/p>\n","protected":false},"excerpt":{"rendered":"
In Diib’s latest email checks, 53% of home improvement websites had no DMARC record at all, compared with 40% of websites across other industries.<\/p>\n","protected":false},"author":1,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"insight_format":"Data point","insight_takeaway":"If you're a contractor, remodeler or tradesperson, there's a better-than-even chance your domain has no DMARC record, so inboxes get no instructions for handling fake emails sent in your name. Customers who expect quotes and invoices by email are the ones most likely to trust a convincing fake.","insight_action":"Ask whoever manages your domain (your registrar, web designer or email provider) to add a DMARC record starting with \"p=none\" so you can monitor it, then tighten it to \"p=quarantine\" once your legitimate email is passing.","insight_source_url":"","insight_read_time":"","insight_featured":"0"},"insight_industry":[35],"insight_topic":[36],"class_list":["post-279","insight","type-insight","status-publish","hentry","insight_industry-home-improvement","insight_topic-email-marketing"],"acf":{"insight_format":"Data point","insight_takeaway":"If you're a contractor, remodeler or tradesperson, there's a better-than-even chance your domain has no DMARC record, so inboxes get no instructions for handling fake emails sent in your name. Customers who expect quotes and invoices by email are the ones most likely to trust a convincing fake.","insight_action":"Ask whoever manages your domain (your registrar, web designer or email provider) to add a DMARC record starting with \"p=none\" so you can monitor it, then tighten it to \"p=quarantine\" once your legitimate email is passing.","insight_source_url":"","insight_read_time":"","insight_featured":false},"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t