Choose the sender address

Because Fallax places simulations directly in the inbox, the From address can use any domain. That includes a lookalike of your own domain or the domain of a vendor you work with, which is exactly what real attackers do.

Where you set it

• In the email template: the From name and From address. The domain picker suggests the brand's own domain and your verified domains, but you can type any domain.

• In the campaign: the Sender domain field in the Email step.

Replies

If the sender domain is not one you verified, replies go to a Fallax reply-to address instead of a real mailbox. Nobody outside your organisation receives them.

What is not allowed

Government, law-enforcement and court identities (for example .gov addresses or police forces) are blocked as senders. Fallax refuses them in the editor and again at send time. Some well-known brands show a caution but can still be used.