Short answer
No. DMARC protects only your real domain, stopping attackers from sending email that uses your exact address. It does not stop criminals registering look-alike or typo-squat domains that resemble yours, because those domains have their own DNS records that you do not control.
In detail
Look-alike domains need different controls:
- FirstNet offers an optional brand-impersonation takedown add-on to SendMarc that detects look-alike domains and phishing infrastructure and runs a takedown workflow
- Inbound protection such as Mimecast helps detect look-alike domains in email reaching your staff, with impersonation protection in the Resilience tier and above
- Mimecast's Complete tier adds Brand Exploit Protect for advanced brand protection
DMARC at p=reject is still essential, because it removes your real domain from the attacker's toolkit. The strongest approach combines enforced DMARC for your own domain, takedown for impersonating domains, and inbound filtering for whatever still arrives.
The takedown add-on suits organisations that have been targeted recently or run a recognisable consumer brand.
Source: FirstNet Email Security & Threat Protection service page →
Didn’t answer your question?