For most companies, email is relied upon as the key unique identifier for customers and employees. It is used at new account openings to determine if the account is new, old, or from an existing client. Companies assume emails are real and secure, and that they are being received by a real account holder, which is why most companies use email as an additional method for authentication or account recovery, as well as a means to confirm sensitive customer instructions. The fact is, that is not always true and the consequences can be heavy, which is s why companies use our Email Reputation service.

​

• At Account Creation to check:

  • If the email works.

  • If the email is synthetic.

  • If the email is known to be compromised.

• At Login with email 2FA or when a password  change is requested:

  • Confirm if email is compromised before allowing a password reset by email, an email sign-in link, or new account signup (this prevents sleeper and protects trusted accounts from bad actors).

  • Establish a decision point to force step-up authentication.

  • Alert key customers of compromised email accounts.

• When a sensitive transaction is initiated:

  • Before sending highly-sensitive email.

  • Confirm end user authentication on large transactions.

  • Authenticate the legitimacy of high-risk accounts/transactions while conducting breach investigations.