| answer text |
<p>It is not possible to send spoof emails from a @GOV.UK domain address, so none
have been sent from an address using the @GOV.UK domain since June 2016. This is due
to the technical controls in place that prevent the forging of a GOV.UK email address
(Sender Policy Framework and Domain-based Message Authentication, Reporting and Conformance).</p><p>
</p><p>The responsibility for monitoring of fake emails using the GOV.UK suffix is
not conducted centrally. Cabinet Office guidance sets out that users receiving fraudulent
emails should notify Action Fraud, or in the case of HMRC emails, HMRC's phishing
team.</p><p> </p>
|
 |
