Start here
Something is wrong. What is actually happening?
The rest of this site is organised by the fix, which only helps if you already know what the fix is called. This page is organised by the symptom.
Money is moving right now
Act first- “Customers are paying invoices that did not come from us”Invoice fraud. Whether authentication would have stopped it depends on which of three things is happening, and one of them is a compromised mailbox that no DNS record can fix.Before anything else: Call the bank that sent the money and ask for a recall before you read anything else. That window is measured in hours.
- “Someone is emailing our customers as us”Spoofing, or a lookalike domain. These look identical to a customer and have completely different fixes.Before anything else: Get one full copy of a fake message with headers, from someone who received it. Do not forward it normally, that rebuilds the headers.
We have disappeared from Google
- “Our Google listing vanished from Maps and Search”A hard suspension. Different from a soft one, and the fix differs, so diagnose before you appeal.
- “The listing is still there but we cannot edit it”Usually a soft suspension, which strips verification and locks editing.
- “It keeps getting suspended after every reinstatement”Something in the listing re-triggers review each time. Appealing again without changing it repeats the outcome.
- “Will we lose our reviews?”It depends on which suspension you have, and on not making it worse in the meantime.
- “Our appeal was denied”A denial is not always final, but a second attempt only helps if something changed between them.
We cannot get verified on Google
- “The verification video was rejected”The reviewer could not confirm location, existence, or that you run the place. Those three are the whole test.
- “It has said processing for days”Sometimes normal, sometimes genuinely stuck. The difference is knowable.
- “The postcard never arrived”Usually an address or delivery problem, and there is a limit on re-requests.
- “We have no storefront to film”A service-area business is judged against a different checklist. Filming a shopfront you do not have will keep failing.
Our email is not landing
- “A customer says they never got our email”Authentication failure is quiet. Mail is accepted and filed into spam, so nothing bounces and nothing warns you.Before anything else: Check what your domain publishes right now. It is free and takes a few seconds.
- “Gmail or Microsoft started rejecting our sends”Bulk sender requirements. These are enforced now, not upcoming.
- “We want a logo in the inbox but have no trademark”Self-asserted BIMI shows a logo in some inboxes with no certificate at all. Gmail is not one of them.
- “We want the logo and blue checkmark in Gmail”That needs DMARC at enforcement plus a certificate, and the certificate needs a registered trademark.
Someone is impersonating us on social
- “There is a fake Facebook page for our business”Reportable, but takedowns are Meta's decision and can fail. Getting the report category right matters.
- “It is happening on several platforms at once”Triage by financial damage, not by which one annoys you most.
- “Our Meta business verification was rejected”Two different Meta products share the word verification, and the free one is probably what you need.
If money has already left an account
Common questions
I do not know which of these is my problem. Where do I start?
If money has moved, start with the bank and law enforcement, not with us. Otherwise start with the free checker. It reads what your domain publishes and tells you where you stand in a few seconds, with no signup, and it will rule several of these in or out.
Can you make the fake account or fake emails stop?
Nobody can promise that. Authentication stops someone sending as your exact domain, which is real and narrower than it sounds. It does nothing about a lookalike domain or a fake social account, and those are takedown requests the platform decides on.
Do you need my passwords to fix any of this?
No, and we will not accept them. Every platform here has a delegated access flow where you invite us and can remove us at any time. We also never take government ID documents or card numbers.
Not sure yet
Check your domain first. It is free.
The checker reads what Verified Everywhere can see publicly about your domain and explains what each result means. No signup, and it rules several of the problems above in or out in a few seconds.