Can someone send email as your organization?
For most small Indiana organizations, the answer is yes — and it is the setting behind the “urgent request from the director, please buy gift cards” fraud that has taken tens of thousands from churches, nonprofits, and small businesses across this state. We check, and we tell you plainly. Free.
What we check, and how
Only what any stranger on the internet can already read: your domain's public records. We do not touch your systems, we do not scan your computers, and we do not need any access or password from you.
- Can your domain be forged?SPF, DKIM, and DMARC — the three records that decide whether a stranger can send mail that looks like it came from your own address.
- Where your mail is handledAnd whether that provider is set up completely or left half-configured, which is the usual case.
- Whether your website is served securelyAnd whether staff email addresses are sitting in the open for phishers to harvest.
What you get
A one-page, plain-English answer: what is open, what it means in practice, and the order we would close it in — written so you can hand it to whoever manages your technology, whether that is a firm or a volunteer. Yours to keep either way, with no obligation and no follow-up calls. We do not cold-call, ever.
If you want it closed for you
Free for Indiana nonprofits and houses of worship, as our schedule allows: we close the email forgery gap, sort accounts and access, check backups and ransomware readiness, and leave a one-page fraud rule your people can actually keep. Clubs and small businesses pay a flat listed price — never a quote, never a subscription. What that covers.
Request your scan: email contact@protectindiana.org with your organization's web address and who to reply to — or use the contact form. A person answers, and it is the same person who does the work.
Common questions
Is this really free? What is the catch?
No catch. The scan reads public records, so it costs us almost nothing, and an organization that closes its own email gap with our page is a good outcome for Indiana either way. If you want the work done for you, we will tell you the price plainly — and for nonprofits and houses of worship, that price is nothing.
Our technology is run by a volunteer. Will this step on them?
No — it helps them. Everything we find is written down and handed over, with the exact records to publish. We are happy to work alongside whoever runs it now, or to hand them the page and step back.
Will you call us?
No. We do not cold-call anyone, and we never will. You reply, or you do not.