Services for Individuals
+40 notarial procedures available online
View all →
Services for Businesses
Notarial solutions for your business
View all →
Digital Expert Services
Forensic analysis and digital evidence validation
View all →
Loans & Mortgages
Credit policies and mortgage cancellation
View all →
About Us
NOTARIAL ACTS OF DECLARATIONS
Proof of Life Certificate Prize Draws Lottery Single Status Minor Travel Consent Cohabitation Certificate Domestic Partnership Dissolution Certified Copies of Documents Various Uses Domestic Partnership Family Reunification Visa Processing
NOTARIAL POWERS OF ATTORNEY
Specific · Other Powers Revocation or Renunciation Public Administration NIE Procedures Purchase and Sale Litigation (Court Proceedings) Inheritance DNI/NIE without Spouse Loans and Mortgages Guarantees and/or Sureties Financial Institutions Divorce (power of attorney to lawyer) Marital Agreements Company Incorporation Verbal Difficulties Hearing Disability Visual Disability
SIGNATURES, CONCILIATION AND ADDITIONAL SERVICES
Signature Authentication Notarial Conciliation Hague Apostille Simultaneous Translation NIF Application Deed in 2 Languages Commercial Policies New Build Declaration Last Wills Death Certificate Marriage Certificate Birth Certificate Web Certification View all →
CORPORATE PROCEDURES
Company Incorporation Registered Office Change Corporate Purpose Change Amendment of Articles of Association Capital Increase Capital Reduction Appointment and Removal Dissolution and Liquidation Civil Law Partnership Dissolution
NOTARIAL POWERS OF ATTORNEY
Acts of Administration Legal Representation (Litigation) Bank Accounts Credit and Financing Cheques and Securities Hiring and Dismissing Staff Execution of Contracts Import and Export Tax Authorities Litigation and Debt Collection Conciliation and Arbitration Real Estate Mergers and Acquisitions Company Liquidation Special Power of Attorney for Companies
BOOKS AND ADDITIONAL SERVICES
Legalisation of Company Books General Meeting Minutes Hague Apostille Notarial Rectification Legal Entity Digital Certificate Notarial Certificates Corporate Certified Copies Filing of Annual Accounts
FOREIGN COMPANIES
Opening a Branch in Spain Opening a Subsidiary ROI/VIES Registration ROI/VIES Notarial Request ROI/VIES Re-registration EPR Power of Attorney View all →
MESSAGING
WhatsApp Expert Report Telegram Expert Report Email Validation
MULTIMEDIA
Photograph Validation Video Validation Audio Validation
FORENSICS
Computer Forensic Analysis Web Certification View all →
POLICIES
Credit Policies Commercial Policies
MORTGAGE CANCELLATION
Cancellation Calculator Cancel BBVA Mortgage Cancel Santander Mortgage Cancel Sabadell Mortgage
HELP
Prices Frequently Asked Questions View all →
930 485 101 Contact
Prices Blog FAQs Cities
HomeExpert ReportsEmail Validation
FORENSIC EXPERTISE · DIGITAL EVIDENCE
100% online process desde 625,00 €

Email Forensic Examination: Authenticity, Authorship and Delivery

Analysis of headers, SPF, DKIM and DMARC to prove who sent what and when.

An email can easily be forged if only a printout is submitted. This forensic examination analyzes the complete technical headers, the domain authentication records (SPF, DKIM, DMARC), the actual server routing path and the timestamps, making it possible to determine whether the email truly came from the sender shown or whether there has been impersonation.

Complete analysis of technical headers
SPF, DKIM and DMARC verification
Detection of spoofing and domain impersonation
Proof of the actual sending date and time
Analysis of attachments and their integrity
Report suitable for ratification in court
Instant WhatsApp OR CALL US 930 485 101
ONLINE REQUEST
Reply < 2 h
Request: Email Validation
">
Your data is protected and secure
Law 11/2023
The same legal validity as signing in person
Registered
Practising notaries of the Notarial Association of Spain
4,7 / 5
Average rating from more than 1.000 clients
< 2 h
Average response time to a request

When might you need it?

The most common cases for this procedure

CEO fraud and BEC scams
Emails impersonating executives to redirect wire transfers: the forensic report proves the impersonation.
Contracts and orders made by email
Acceptances, quotes and agreed changes made by email that the other party denies.
Notice periods and employment communications
Proving that an email was sent and delivered on a specific date.
Corporate phishing
Documenting the attack received in order to file a claim with the institution or the insurer.
REQUIREMENTS FOR THIS PROCEDURE
Provide the email in its original format (.eml or .msg), never just as a PDF or printout
Access to the mailbox where it was received or sent, or to its backup copy
Do not forward the email before the examination: forwarding alters the headers
If the domain is your own: access to DNS records and server logs if available
DOCUMENTS YOU WILL NEED
01Original email file (.eml / .msg) with complete headers
02Access to the mailbox or a full export of it
03Domains involved (sender and recipient)
04Mail server logs if accessible (these strengthen the report)
REGULATIONS: RFC 5321/5322 (SMTP and message format) RFC 7208 (SPF), RFC 6376 (DKIM), RFC 7489 (DMARC) Spanish Civil Procedure Act (LEC), arts. 299 and 326 eIDAS Regulation 910/2014

How does the process work?

From request to signed document, with no travelling

1 Receipt of the original file 2 Header analysis 3 Authentication verification 4 Report with conclusions
1
Receipt of the original file
⏱ 24 hours
We'll show you how to export the .eml file without altering it: most forensic examinations fail at this very first step.
2
Header analysis
⏱ 24 hours
Server routing path, timestamps and internal consistency of the message.
3
Authentication verification
⏱ 24 hours
SPF, DKIM and DMARC checks on the domain to detect impersonation.
4
Report with conclusions
⏱ 48 hours
Expert opinion on authenticity, authorship and date, with technical appendices and ratification available.

Clients who have already done it

Verified reviews of this service

4,7★★★★★
★★★★★ES
"Nos suplantaron el correo del director financiero y estuvimos a punto de transferir 40.000 €. El peritaje acreditó el spoofing y sirvió para la denuncia y el seguro."
PG
Pilar G.
Fraude BEC · Madrid
★★★★★EN
"The supplier denied ever accepting our order by email. Header analysis and DKIM verification proved it was genuine. Case closed in our favour."
AL
Andrew L.
Contract dispute · Málaga
★★★★★ES
"Necesitaba probar que envié mi preaviso en plazo. El informe acreditó fecha y entrega efectiva. Impecable."
IS
Iván S.
Laboral · Zaragoza
★★★★★FR
"Expertise très rigoureuse sur les en-têtes des e-mails. Le rapport a démontré la falsification de la date. Recommandé."
CM
Céline M.
Litige commercial · Perpignan
★★★★★ES
"Necesitaba el trámite con urgencia y lo resolvieron en tiempo récord. El notario fue muy profesional y recibí el documento al día siguiente."
CR
Carmen R.
España
★★★★★EN
"Excellent service from start to finish. Everything was handled online and the signed document arrived within 24 hours. Highly recommended."
JW
James W.
Reino Unido
★★★★★ES
"Lo gestioné desde Buenos Aires sin viajar a España. Me guiaron paso a paso, incluso con el certificado digital. Todo claro y sin sorpresas."
MG
Mariana G.
Argentina
★★★★★FR
"Démarche réalisée entièrement en ligne depuis Paris. Équipe très réactive sur WhatsApp et notaire très professionnel. Impeccable."
SL
Sophie L.
Francia
★★★★★ES
"El proceso fue mucho más sencillo de lo que esperaba. Atención cercana por WhatsApp y presupuesto cerrado sin costes ocultos."
AM
Andrés M.
España
★★★★★DE
"Die Beurkundung wurde komplett online erledigt. Schnelle Terminvergabe, klare Anweisungen und das Dokument kam am nächsten Tag."
KB
Katrin B.
Alemania
★★★★★IT
"Pratica completata interamente online dall'Italia. Notaio disponibile e documento firmato in 24 ore. Servizio eccellente."
MT
Marco T.
Italia
★★★★★PT
"Tratei de tudo sem sair de Lisboa. Acompanhamento constante por WhatsApp e documento entregue no dia seguinte. Recomendo totalmente."
BS
Beatriz S.
Portugal
★★★★★ES
"Desde CDMX pensé que sería complicadísimo, pero salió a la primera. Videollamada puntual, notario clarísimo y precio cerrado."
GP
Gloria P.
México
★★★★★EN
"Handled from New York without flying to Spain. Clear instructions, fast scheduling and constant updates. Five stars."
SK
Sarah K.
Estados Unidos

Frequently asked questions

How long does the analysis take?
The complete analysis takes between 3 and 5 business days. In urgent cases, we can expedite the process with an additional fee.
How should I send the email?+
It is essential to send us the complete email with all its headers (technical headers). We will explain how to correctly export the email from Gmail, Outlook, Apple Mail, or other email clients.
What are email headers?+
Headers are the technical headers of the email containing information about origin, route, servers, IP addresses, and other technical data invisible in the normal message view.
Can you trace the actual email origin?+
Yes, through header analysis, IP addresses, servers, and authentication, we can determine the actual email origin, even if the sender is forged.
Can an email be forged?+
Yes, it is technically possible to forge an email sender (email spoofing). However, forensic header analysis can detect these forgeries and determine the actual origin.
Is the report valid in court?+
Yes, our reports have full legal validity. Experts can ratify the technical analysis in court and explain the conclusions in an understandable manner.
What is phishing?+
Phishing is a fraud technique where attackers send emails that appear to come from legitimate sources to steal personal information, passwords, or money. We can identify these fraudulent emails.
How much does the service cost?+
The price depends on the number of emails to analyze and case complexity. Contact us for a personalized quote with no obligation.
What are SPF, DKIM, and DMARC?+
These are email authentication protocols: SPF (Sender Policy Framework) verifies that the server sending the email is authorized by the domain; DKIM (DomainKeys Identified Mail) adds a cryptographic signature certifying that the email comes from the declared domain; DMARC (Domain-based Message Authentication) establishes policies for what to do if SPF or DKIM fail. These protocols are essential for verifying authenticity.
Can the expert testify in court?+
Yes, our forensic experts are prepared to appear in court, ratify the expert report, technically explain the header and authentication analysis, and answer questions from the court and parties. Their experience in email protocols and computer security guarantees technical credibility.
Can you analyze an email I received years ago?+
Yes, as long as you keep the original file (.eml, .msg) or can export it from your email client. Headers and metadata remain intact in the file. The more time that has passed, the more important it is to preserve the original email without forwarding or modifying it.
What is the difference between forwarding an email and exporting it?+
Forwarding modifies the original headers and adds new ones, losing crucial forensic information. Exporting the email (.eml or .msg) preserves all original headers intact, which is essential for forensic analysis. You should always export, never forward.
Can you recover deleted emails?+
It depends on where they were stored and how much time has passed. If they were on a server (Gmail, Outlook.com), it depends on the provider's retention policies. If they were on a local client (Outlook, Thunderbird), in some cases we can perform forensic recovery from the hard drive if the space has not been overwritten.
Can you analyze emails from any provider?+
Yes, we analyze emails from any provider: Gmail, Outlook/Hotmail, Yahoo, ProtonMail, corporate Exchange servers, hosting accounts, etc. The basic header structure is standard (SMTP protocol), although each provider adds their own specific fields that we also analyze.
What technical information does the report include?+
The report includes: complete export of technical headers (raw and interpreted), email route diagram through MTA servers, analysis of each Received field with timestamps, SPF/DKIM/DMARC verification with detailed results, IP address analysis with geolocation, intermediate server identification, SHA-256 hashes of the original .eml/.msg file, attachment analysis if any, detection of temporal or route inconsistencies, conclusions on authenticity and origin, and explanatory annexes. All documented according to ISO/IEC 27037.
Why do you need the .eml file instead of a PDF of the email?+
Because all the evidence lies in the technical headers, which a PDF strips out. Without the headers it's impossible to verify the server routing path, SPF, DKIM, or the actual date: all that remains is text that anyone could have written.
Can it be determined whether an email was forged?+
In most cases, yes. Spoofing leaves traces: DKIM alignment failures, SPF records that don't authorize the sending server, inconsistencies in the routing timestamps. The report explains which check fails and what that means.
Can you prove that the recipient received and read it?+
Delivery to the destination server can usually be proven through logs; reading it cannot be technically proven unless a read receipt exists. We state this clearly in the report rather than forcing a conclusion.
Is this useful for CEO fraud or BEC scams?+
It's one of its main uses. The report documents the impersonation of the domain or account, which insurers and criminal complaints typically require.
What happens if the email is in a corporate mailbox I no longer have access to?+
We will need authorization from the mailbox owner or a court order. If you were the recipient and still have your own copy, we can work with that.
Do documents signed online have the same validity as those signed in person?+
Exactly the same. Law 11/2023 recognises the full legal validity of notarial documents executed by video call with a qualified electronic signature before a registered notary.
Do I need a digital certificate?+
Yes, to sign electronically you need a digital certificate or an electronic DNI. If you do not have one, we help you obtain it quickly before your appointment, with no additional handling fee.
Can I do it from abroad?+
Yes, the notarial video call works from any country. You only need a stable connection, your valid identity document and a digital certificate.
How much does this service cost?+
The quote includes the official notarial fees set by the Notarial Association plus our handling, fixed before you start and with no hidden costs. Request it with no obligation via WhatsApp or the form.
What if I have questions during the process?+
Our team supports you from start to finish via WhatsApp, phone or email, and the notary answers all your legal questions before signing.
Ready to get started?
Request information with no obligation: we will contact you within 2 hours.
WhatsApp 930 485 101