Business
Individual
Partners
Intelligence
How we work
Sign in Check my firm
Glossary › Patterns › Third-party / vendor risk
Reference · Pattern

Outside adviser with no DMARC on its sending domain

Severity CriticalKind Third-party / vendor riskEffort to fix SignificantUpdated 29 Sep 2026By LeakTrace
Definition

A firm’s accountant, lawyer or broker sends mail from a domain with no DMARC policy, so email in that adviser’s name can be forged to ask the firm for a payment.

What it is

Why it matters

How anyone can check it

nslookup -type=txt _dmarc.youradviser.ca

No record, or p=none, means the adviser’s email can be forged.

Remediation direction

Institutional-grade programs run this assessment quarterly and track posture changes over time.

LeakTrace does not perform the fix. In an assessment, every finding carries a step-by-step remediation for the firm’s IT provider.

See what is open from outside before anyone else does. Check my firm →