LetterAgent
Mail physical letters by just asking your AI assistant.
Home > Guides > Fax vs email security
Fax has one genuine security edge: the document travels as a single phone call between two machines, so it never sits on a mail server where it can be searched, forwarded, or phished. That said, most faxes today land on email-to-fax servers, which reintroduces the same inbox risks email has. The honest answer: fax beats unencrypted email on the wire, not always at the destination.
| Aspect | Fax | |
|---|---|---|
| How it travels | One phone call between two machines | Hops across several servers between sender and recipient |
| Where copies end up | The receiving machine, or its email-to-fax inbox | Every server in the chain, plus backups and archives |
| Encryption | Usually none on the wire; intercepting it takes phone-network access | TLS between servers is common, but providers can still read the content |
| Sender identity | Caller ID only, and caller ID can be spoofed | Well-configured domains are harder to spoof; phishing remains the big risk |
| Proof of sending | Confirmation page with a matching page count | "Sent" folder; read receipts are unreliable |
Mostly institutional memory. Policies at banks, insurers, and medical offices were written in the 1990s and early 2000s, when ordinary email really was the least secure option: no encryption between servers, no two-factor login, phishing barely a word. "Mail or fax" was the safe instruction, and nobody rewrote it. Compliance teams also like fax because the confirmation page gives them a tidy artifact to file, something email never standardized. In Canada, the same habit shows up in PIPEDA-era office procedures; in the US, in HIPAA-era ones. The wording survived even as the technology underneath changed.
Three places. First, the point-to-point argument dies at the receiving end: a huge share of "fax machines" today are software servers that convert the incoming fax to a PDF and email it to someone's inbox. From that moment on, it has every weakness of email. Second, fax has no real sender authentication. A received fax tells you which caller ID claimed to send it, and caller ID is trivially spoofed, so a fax proves less about who sent it than most people assume. Third, the misdial problem: email a wrong address and you usually get a bounce; fax one wrong digit and your full document prints out on a stranger's machine with no bounce and no recall.
Intercepting a live fax call takes access to the phone network, which is a higher bar than intercepting email, where the document sits on multiple servers as ordinary data. That is the one part of the fax reputation that still holds for true machine-to-machine faxing over phone lines. But it is a narrow win: most attacks on sensitive documents are not wiretaps. They are misdirected sends, unattended output trays, compromised inboxes, and social engineering. Fax is weaker than email against almost all of those, and no better against the rest once email-to-fax conversion enters the picture.
Match the method to the actual risk. If the recipient is a clinic, law office, or agency that explicitly asks for fax, send the fax: fighting their process creates more exposure (printed copies, re-sends) than complying. If you are choosing freely and both parties are capable, a secure portal or an encrypted file share beats both fax and email. If it is fax versus plain email with no encryption anywhere, fax still wins on the wire, provided you verify the number by phone first and use a cover sheet. One practical rule covers most cases: the biggest real-world fax risk is dialing the wrong number, and the biggest email risk is phishing, so verify the destination for fax and verify the sender for email.
LetterAgent's fax flow follows the same pattern: you describe the fax to your AI assistant, get a per-fax quote with the page count verified, approve the exact total, and pay once before it is sent, to US and Canadian fax numbers only. Fax is in private testing right now.
Ready to fax it? Fax with LetterAgent: describe it to your AI assistant, approve the exact quoted price, and it is sent.
LetterAgent is a working name. Prices include print, postage, and our service fee. US prices in USD, Canadian prices in CAD (Canadian prices exclude applicable sales tax, added at checkout). Currently in private testing.
Need help? Ask your assistant: it can check a job's status any time. If it ever can't handle something: hello@getletteragent.com