Anti-Spam

Anti-Spam & Email Security · British Virgin Islands

Modern anti-spam software filters incoming and outgoing email for spam, phishing and malware, and is combined with authentication standards (SPF, DKIM, DMARC) and impersonation protection to stop business email compromise, rather than relying on filtering alone.

Email remains the single most common way attackers reach a British Virgin Islands business, and spam filtering alone is no longer enough to stop them — modern attacks impersonate a real supplier or director rather than sending obviously fake mail.

Fresh Mango Technologies configures Microsoft Defender for Office 365 as the core of email security for Microsoft 365 clients, layered with domain authentication and staff training, and hands specialist incident response to our practice at Complete Cyber Security.

What modern email security actually filters

Spam and bulk mail — unwanted commercial email, filtered before it reaches the inbox.
Phishing — messages designed to steal credentials by imitating a trusted sender or login page.
Malware and malicious attachments — files or links that install malicious software when opened.
Impersonation and business email compromise — messages that spoof a director, supplier or client to request a payment or credential.
Bulk domain reputation checks — blocking mail from domains already known to send malicious traffic.

Microsoft Defender for Office 365

For businesses on Microsoft 365, Microsoft Defender for Office 365 is the standard tool: it adds Safe Links (checking URLs at the moment they are clicked, not just on arrival), Safe Attachments (detonating attachments in an isolated environment before delivery), and anti-phishing policies tuned to detect impersonation of specific people, such as a managing director or finance controller.

This is a meaningful step up from default Exchange Online Protection, which catches obvious spam and malware but is not tuned for the targeted impersonation attempts that cause the most damage.

Domain authentication: SPF, DKIM and DMARC

SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail) and DMARC (Domain-based Message Authentication, Reporting and Conformance) are DNS records that prove mail claiming to come from your domain genuinely did. Without them, it is straightforward for an attacker to send mail that appears to come from your own company to your own clients.

SPF lists which servers may send mail for your domain, DKIM cryptographically signs outgoing messages, and DMARC tells receiving mail servers what to do with mail that fails those checks — and reports back to you when someone tries. Configuring all three correctly is one of the highest-value, lowest-cost security improvements a business can make.

Quarantine handling and user training

Every filtering system quarantines some legitimate mail and misses some malicious mail, so the process around the technology matters as much as the technology itself. Staff need a clear, quick way to release genuine mail from quarantine and an equally clear way to report suspicious mail that got through.

Fresh Mango pairs Microsoft Defender for Office 365 configuration with regular phishing-awareness training, because the last line of defence against a well-crafted impersonation email is a member of staff who knows to check before they act on it.

Basic spam filtering versus modern email security

Consideration	Basic spam filter	Microsoft Defender for Office 365
Detects	Known spam patterns and bulk mail	Spam, phishing, malware, impersonation, business email compromise
Link checking	None or one-time scan on arrival	Safe Links checks the URL again at the moment it is clicked
Attachments	Signature-based scanning only	Safe Attachments detonates files in an isolated environment first
Impersonation protection	Not typically included	Policies tuned to specific named executives and suppliers
Reporting	Limited or none	Domain authentication (DMARC) reporting on spoofing attempts

When should a business use this?

Preventing invoice fraud

Combine anti-impersonation policies with a verbal-verification rule for any request to change bank details.

Protecting a recognisable brand

Configure SPF, DKIM and DMARC so attackers cannot easily spoof the company's domain to clients or suppliers.

Reducing help desk load

Give staff a self-service way to review and release quarantined mail instead of raising a ticket for every delay.

Best practices we recommend

Enable Microsoft Defender for Office 365 Safe Links and Safe Attachments for every mailbox.
Publish SPF, DKIM and DMARC records for every domain that sends mail, including ones that never should.
Build named anti-impersonation policies for the managing director, finance team and other high-value targets.
Require a verbal callback on any request to change bank or payment details, however it arrives.
Run phishing-awareness training at least annually and after any real incident.
Review DMARC reports periodically to catch new spoofing attempts against your domain.

Frequently asked questions

Is Microsoft's built-in spam filter enough on its own?

Default Exchange Online Protection catches obvious spam and known malware but is not tuned for targeted impersonation or business email compromise. Most businesses handling money, client data or supplier payments benefit from adding Microsoft Defender for Office 365 for Safe Links, Safe Attachments and named anti-impersonation policies.

What is business email compromise?

Business email compromise is an attack where a criminal impersonates a trusted person — often a director or supplier — usually by spoofing or subtly altering an email address, to trick staff into transferring money or sensitive information. It relies on social engineering more than malicious software, which is why staff training matters alongside filtering.

What do SPF, DKIM and DMARC actually do?

SPF lists the servers allowed to send mail for your domain, DKIM digitally signs outgoing mail so it cannot be altered in transit without detection, and DMARC tells receiving servers what to do with mail that fails those checks, plus reports back on spoofing attempts. All three together make it much harder to impersonate your domain.

What should staff do with quarantined email?

Legitimate senders occasionally land in quarantine; staff should be able to review and release genuine mail themselves through the quarantine portal, and report anything suspicious that reached the inbox rather than deleting it, so the security team can adjust filtering.

Who investigates a suspected email compromise?

Fresh Mango Technologies can identify and contain an initial compromise, but a confirmed business email compromise incident — particularly one involving fraud or data exposure — is escalated to our specialist practice at Complete Cyber Security for full investigation and response.

Related services and guides

Practical advice, no obligation

Lock down your email before an attacker tests it

Fresh Mango Technologies can review your current filtering, publish proper SPF, DKIM and DMARC records, and configure Microsoft Defender for Office 365 for your domain.

Book Your Free 30-Minute Consultation

A professional Anti-spam software solution helps secure your incoming and outgoing emails. Originally intended to prevent inboxes from being overwhelmed with unwanted email, anti-spam software has evolved. It now provides protection against various online threats such as spam, viruses, malware, ransomware, spear phishing, impersonation and more. Used in conjunction with a professional antivirus solution, your business security is dramatically improved when you deploy anti-spam software.

Our recommended anti-spam solution is Microsoft Defender for Microsoft 365. Microsoft 365 Defender is a unified pre- and post-breach enterprise defence suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. Microsoft Defender for Office 365 safeguards your organization against malicious threats posed by email messages, links (URLs), and collaboration tools. Defender for Office 365 includes:

Anti-spam software - Automated investigation and response capabilities

Save time and effort investigating and mitigating threats.

Threat Protection Policies for Inbound and Outbound Email Security

Define threat-protection policies to set the appropriate level of protection for your organization.

Anti-spam software - Reports

View real-time reports to monitor Defender for Office 365 performance in your organization.

Threat investigation and response capabilities

Use leading-edge tools to investigate, understand, simulate, and prevent threats.

A professional Anti-Virus software solution which ensures that if viruses do get through to your system or server, they are quarantined and neutralized immediately. We standardize on two anti-virus software products – Vipre and Sophos. We will also be pleased to manage your chosen anti-virus software. Note that we always recommend the paid, professional version of anti-virus software for businesses small and large. Free anti-virus software has numerous drawbacks – there’s a reason it’s free after all!

Explore more in Cyber Security

Cyber security assessments, awareness training, threat detection and incident response.

View the Cyber Security hub