DMARC Compliance

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a system for validating emails that aims to safeguard your company’s email domain from misuse in spoofing and phishing attacks. It operates by verifying emails sent from your domain, ensuring that only authorised senders can utilise your domain name for outgoing messages. This process effectively prevents scammers from impersonating your domain. In simple terms, with DMARC compliance, recipients can be completely assured that any email claiming to come from your domain is legitimate and not fraudulent.
Implementing DMARC provides several advantages for your business:
- Shields employees against email fraud and stops them from receiving any phishing, spoofing or impersonation scams carried out by fraudsters who’ve hijacked your brand name to impersonate employees, executives or anyone in your organisation, for criminal gain.
- Safeguards customers from receiving any form of fraudulent email activity, including impersonation, phishing and spoofing, that illegitimately uses your brand and employee names for criminal gain.
- Protects suppliers and partners against receiving fraudulent email from criminals who are using your name, and from illegitimate emails being sent from your email service partners using your name.
Full DMARC Compliance protects your brand reputation, enhances email deliverability and offers valuable insights by giving you visibility into how various recipients are managing your emails.
You can check your domain name’s current DMARC score by clicking here and entering your domain name (your domain is the bit that comes after the @ symbol in your email address e.g. mycompany.ie). A score of 1 or 2 means you have zero DMARC protection in place, a score of 3 means you are publishing a DMARC but it’s not providing any protection, 4 means you have basic protection and 5 is fully compliant / protected.
Want to see how easy it is to send an email pretending to be from your business? Click here and enter your work email address and a personal email address (Gmail etc.) in the boxes. This will send a spoofed email to your personal account that looks like it came from your work email. This is a demo system only so does not record your email addresses or send you any malicious links.
Please see our resources page for more about DMARC Compliance.