Does SPF and DKIM stop VEC when the bad guy is using a misspelled domain they have control of?

If the bad guy has registered a similar domain to their target/victim wouldn’t they also have the ability to dictate the DNS records to ensure that their emails pass through spam checks?

We have had a couple of instances where the bad emails came from a domain that was close in spelling to the vendor and the emails were being sent from that domain with bogus invoices.

Our security vendor is stating that this would be prevented if DKIM checking …

bad control cybersecurity dkim dns domain emails spam spf target vec vendor victim