Someone tried spoofing hear-me.social as an email sender. It was rejected by Yahoo because I set up my #SPF, #DKIM and #DMARC records in my DNS to prevent spoof emails from being delivered. This constantly happens with all my domains.
If you have a domain, please properly protect it from spoofing so people neither get hurt, and you don't lose your domain.
You'd be surprised how many domain owners do not protect their domains properly. A well-known cybersecurity expert, for example, doesn't protect his domain that he uses to send his newsletter, nor specifies that he get reports about it. I'm sure people are freely spoofing his domain. I see bank domains, cloud providers, and ISPs that aren't protecting their domains from spoofing. Bulk senders barely ever protect the sending domains.
And if you have a domain that doesn't send email, and you don't protect, it will send email, but not yours. https://www.gov.uk/guidance/protect-domains-that-dont-send-email
The Google notification I received today tells me that they received an email from Yahoo, claiming to be from hear-me.social, but it failed both the DKIM and SPF checks for hear-me.social and they rejected it.
But, here's the kicker. They only rejected it because I explicitly say to do this in my DNS in my DMARC policy (p=reject). The majority of domain owners don't do this. They either say deliver it anyway to the spam folder (p=quarantine) or deliver it anyway to the inbox (p=none or DMARC missing) which is freaking amazing that they wouldn't make a simple setting to protect you, and themselves.
Protect your domains and be careful with email because it seems most domain owners are not trying to protect you.