We’ve seen a lot of attempted spoof emails recently and recommend checking SPF, DKIM, DMARC and MTA_STS settings to protect your school.
Here is a link to a knowledge base article with our recommended settings to help prevent spoof and phishing emails coming through to the school.

https://realsmart.groovehq.com/help/prevent-spam-spoofing-phishing-with-gmail-authentication