Can Google Workspace flag email from a domain that looks like ours?

Which setting is it?

Protect against domain spoofing based on similar domain names Protect against incoming messages from domains that appear visually similar to your company's domains or domain aliases. Keep email in inbox and show warning (Default) Move email to spam Quarantine

In the Gmail safety settings, under spoofing and authentication, the first option is protection against domain spoofing based on similar domain names.

Google Workspace has a setting that protects against incoming messages from domains that look visually similar to your company's domains, and its default action is to keep the email in the inbox and show a warning.

What sits beside it?

Protect against messages where the sender's name is a name in your Google Workspace directory, but the email isn't from your company domain or domain aliases.

The same section protects against messages that use the name of someone in your directory but do not come from your domain. That covers a look-alike that borrows a partner's name as well as your domain's look.

How do I set it?

1. In the Google Admin console, go to Apps, Google Workspace, Gmail, Safety.
2. Scroll to Spoofing and authentication.
3. Turn on protection against domains with similar names and against spoofing of employee names.
4. For the people who handle payments, choose Quarantine or Move email to spam rather than the warning.
5. Turn on 'Apply future recommended settings automatically'.