Someone can send email as your spa.
No password needed. Most spa domains never told the internet who is allowed to send mail on their behalf, so anyone can.
One in eight was protected.
The other seven had nothing stopping someone from sending mail in their name.
Public records for 16,770 med spa and aesthetics domains, checked July 2026.
Two ways it shows up.
Scams sent in your name
Usually a fake gift card offer, sent to people who trust you. You find out when someone calls, upset, about money they already sent.
Your own email stops arriving
Confirmations, reminders, and promotions drift into spam. It does not look like a technical problem. It looks like more no-shows.
Twenty minutes, mostly us.
- 1
We show you what your records say today.
- 2
We write the fix. You paste it in, under your own login, with us on the call.
- 3
We confirm it worked and send you one note in plain English.
$50
That is the whole price. One time, nothing after it, no subscription.
What we never ask for
- Your passwords
- Your client list
- Access to your booking system
- Access to your books
This is a change to the public records that describe your domain. For the technically inclined: SPF, DKIM, and DMARC.
Real people, here in Arizona.
Signal is a small company that helps owners fix the parts of a business that quietly leak time and money. We would like to work with med spas, so we are starting by fixing something real before asking you for anything.
If the fix is all you ever want from us, that is a fine outcome.
Patrick Jeffries
Signal
Daniel Diaz
Signal
Tell us your spa.
We look it up and reply with what your records say, whether or not you want us to change anything.
Photography by Aalo Lens , Performance Medicine , Kimiya Sabbaghan on Unsplash.