Email fraud is the most common way criminals try to reach companies like ours and the people we work with. The good news is that almost all of it can be stopped with a few simple habits. This guide explains how to confirm that a message is genuinely from CPS Group, what warning signs to look for, and how to handle any request that involves money or sensitive information.
We authenticate every email we send. CPS Group uses SPF, DKIM and DMARC across our domains, and our main domains are set to the strictest level: a forged message that claims to come from cps-group.com or copma.ai is rejected by any mail provider that checks, before it ever reaches an inbox. Our newsletter is sent from news.cps-group.com and is digitally signed in the same way.
Genuine CPS Group communication comes from these domains:
A message from any other domain, or from an address that only looks similar, is not from us.
Do not reply to it and do not act on it. Contact your usual CPS Group contact first, using a phone number or address you already know and trust, and confirm the request before taking any action. A genuine request will always survive a quick check.
For our standing notice on this, see our cybersecurity notice on phishing.