We’ve seen a lot of attempted spoof emails recently and recommend checking SPF, DKIM, DMARC and MTA_STS settings to protect your school.
Here is a link to a knowledge base article with our recommended settings to help prevent spoof and phishing emails coming through to the school.