Skip to content

You're viewing the June 2026 edition (archived). See the latest edition →

banks · France

22% of banks in France are not protected against email spoofing

Public DMARC posture of 49 banks. Edition of June 2026.

27

Protected

11

Enforcing

10

Monitoring only

1

No DMARC

How it has evolved

At-risk over timeShare not protected against spoofing across 4 monthly editions.26%0%22%2026-0626%2026-0726%2026-0825%2026-09
% at risk

Methodology

We read each organization's public DNS — the DMARC record on its consumer-facing domain — and classify the published policy (none / quarantine / reject). "Protected" means an enforced p=reject policy. Only public data is used; figures reflect the edition date and can change as records are updated.

Previous editions

An extract, status by status

47 of the 49 banks, up to 25 per status, in alphabetical order. The full list — with search, filters and sorting — lives in the Rankings.

The full list of banks lives in the Rankings, with search, filters and sorting. Open the Rankings →

Protected (p=reject)27 organisations

Protected (p=reject): 25 organisations out of 27, in alphabetical order
OrganizationGrade
AXA Banqueaxabanque.fr(corporate domain : axa.fr)B
Banque BCPbanquebcp.frA
Banque de Savoiebanque-de-savoie.frA
Banque Delubac & Ciedelubac.comA
Banque Palatinepalatine.frA
Banque Populairebanquepopulaire.frA
BforBankbforbank.comA
BNP Paribasbnpparibas.fr(corporate domain : bnpparibas.com)A
BRED Banque Populairebred.frA
BTP Banquebtp-banque.frA
Caisse d'Épargnecaisse-epargne.frA
CASDEN Banque Populairecasden.frA
CCFccf.frA
Crédit Agricole d'Île-de-Franceca-paris.com(corporate domain : credit-agricole.fr)A
Crédit Coopératifcredit-cooperatif.coopA
Crédit Maritimecreditmaritime.frA
Crédit Mutuel de Bretagnecmb.frA
Fortuneofortuneo.frA
Hello bank!hellobank.frA
HSBC Continental Europehsbc.frA
Indosuez Wealth Managementca-indosuez.comA
Neuflize OBCneuflizeobc.frA
Nickelnickel.euA
Oneyoney.frA
Qontoqonto.comA

Protected (p=reject): see the full list in the Rankings →

Enforcing (p=quarantine)11 organisations

Enforcing (p=quarantine): 11 organisations out of 11, in alphabetical order
OrganizationGrade
Banque Hottinguerbanque-hottinguer.comB
Banque Transatlantiquebanquetransatlantique.comB
BoursoBankboursobank.comB
CICcic.frB
Floafloabank.frC
Manager.onemanager.oneB
Milleis Banquemilleis.frB
Monabanqmonabanq.comB
Propulse by CApropulsebyca.frC
Shineshine.frB
Sumeriasumeria.eu(corporate domain : sumeria.fr)B

Monitoring only (p=none)10 organisations

Monitoring only (p=none): 10 organisations out of 10, in alphabetical order
OrganizationGrade
Banque Richelieu Francebanquerichelieu.comF
Banque Wormser Frèresbanquewormser.comD
Blankblank.appD
Bpifrancebpifrance.frD
Chaabi Bankchaabibank.frD
Green-Gotgreen-got.comD
Helioshelios.doD
La Banque Postalelabanquepostale.frD
LCLlcl.frD
Pixpaypixpay.frD

No DMARC1 organisation

No DMARC: 1 organisation out of 1, in alphabetical order
OrganizationGrade
Edmond de Rothschildedmond-de-rothschild.comF