Changing your SMTP server configuration that way would break things, so the question is whether to set up a new, company-internal SMTP server, and give your emp

Changing your SMTP server configuration that way would break things, so the question is whether to set up a new, company-internal SMTP server, and give your employees new addresses there. But that won't quickly stop the phishing, because your ppl still need to get email via the public network from clients and suppliers. Setting up a new server isn't easy unless you hire an outside service provider, and if you're willing to do that, Slack et al offer a nicer UX than the well known email/webmail clients. Orgs with sufficient IT resources commonly do run internal SMTP servers.