I have a customer who registered his domain name with Google Apps back when it was free. His organization uses the GMail app for e-mail. Recently the customer has had his e-mail address spoofed to e-mail other members in the organization requesting transfer of funds. I have obtained the message headers from these e-mails and am able to prove that the customer's e-mail account was not compromised. I have already reported it to Google and provided them with the complete message headers. Is there any actual steps I can take to prevent this from happening?
Edited by jcreen, 19 December 2015 - 02:57 AM.