You're viewing the August 2026 edition (archived). See the latest edition →
banks · Spain
28% of banks in Spain are not protected against email spoofing
Public DMARC posture of 44 banks. Edition of August 2026.
20
Protected
11
Enforcing
6
Monitoring only
6
No DMARC
How it has evolved
Methodology
We read each organization's public DNS — the DMARC record on its consumer-facing domain — and classify the published policy (none / quarantine / reject). "Protected" means a p=reject policy enforced on all mail. A policy published with pct below 100 counts one step lower — only that share of mail receives it — and a domain publishing several DMARC records is classified invalid, since none of them applies. This rule has applied since 7 October 2026; earlier editions classified on p= alone. Only public data is used; figures reflect the edition date and can change as records are updated.
Previous editions
An extract, status by status
43 of the 44 banks, up to 25 per status, in alphabetical order. The full list — with search, filters and sorting — lives in the Rankings.
The full list of banks lives in the Rankings, with search, filters and sorting. Open the Rankings →
Protected (p=reject)20 organisations
| Organization | Grade |
|---|---|
| Abancaabanca.com | A |
| Banco Sabadellbancsabadell.com(corporate domain : grupbancsabadell.com) | A |
| Banco Santanderbancosantander.es(corporate domain : santander.com) | A |
| Bankinterbankinter.com | A |
| BBVAbbva.es | A |
| CaixaBankcaixabank.es(corporate domain : caixabank.com) | A |
| Caja Rural de Aragóncajaruraldearagon.es | B |
| Caja Rural de Navarracajaruraldenavarra.com | A |
| Caja Rural de Soriacajaruraldesoria.com | B |
| Cajasurcajasur.es | A |
| Deutsche Bank Españadeutsche-bank.es | A |
| Eurocaja Ruraleurocajarural.es | A |
| EVO Bancoevobanco.com | A |
| Globalcajaglobalcaja.es | A |
| imaginimagin.com | A |
| ING Españaing.es | A |
| Kutxabankkutxabank.es | A |
| MyInvestormyinvestor.es | A |
| Openbankopenbank.es | A |
| Unicaja Bancounicajabanco.es | A |
Enforcing (p=quarantine)11 organisations
| Organization | Grade |
|---|---|
| Banca Marchbancamarch.es | B |
| Banco Mediolanumbancomediolanum.es | B |
| Banco Pichincha Españabancopichincha.es | B |
| Bnextbnext.es | D |
| Caixa Ontinyentcaixaontinyent.es | C |
| Caixa Popularcaixapopular.es | C |
| Cajamarcajamar.es | B |
| Cajasietecajasiete.com | B |
| Laboral Kutxalaboralkutxa.com | B |
| Renta 4 Bancor4.com(corporate domain : renta4banco.com) | B |
| WiZinkwizink.es | C |
Monitoring only (p=none)6 organisations
| Organization | Grade |
|---|---|
| Caja Rural de Teruelruralteruel.com | D |
| Cajalmendralejocajalmendralejo.es | D |
| CBNKcbnk.es(corporate domain : bancocaminos.es) | D |
| Colonya Caixa Pollençacolonya.com | F |
| Ibercajaibercaja.es | D |
| Singular Banksingularbank.es(corporate domain : singularbank.com) | D |
No DMARC6 organisations
| Organization | Grade |
|---|---|
| Andbank Españaandbank.es | F |
| Caixa Enginyerscaixaenginyers.com | F |
| Caja Rural de Asturiascajaruraldeasturias.com | F |
| Caja Rural de Granadacajaruralgranada.es | F |
| Caja Rural del Surcajaruraldelsur.es | F |
| Cajaviva Caja Ruralcajaviva.es | F |