Thanks. Already have SPF and DKIM. These are not spoofed emails being sent out from the domain. This is someone out there who is going to websites and signing u

Thanks. Already have SPF and DKIM. These are not spoofed emails being sent out from the domain. This is someone out there who is going to websites and signing up for stuff and using an email address that does not exist at my domain. My guess is that they signed-up for a Google Workspace account thinking that they'd be able to then retrieve emails coming back to them.