A quarter of all emails from federal email addresses are fraudulent, according to a study by Agari, an email security firm with extensive federal contracts. Agari reports that “the email protocol does nothing to check if a message actually was sent by the address listed in the ‘from’ field.”