Skip to content

You're viewing the July 2026 edition (archived). See the latest edition →

banks · France

26% of France's banks are not protected against email spoofing

Public DMARC posture of 88 banks. Edition of July 2026.

How it has evolved

At-risk over timeShare not protected against spoofing across 3 monthly editions.26%0%22%2026-0626%2026-0726%2026-08
% at risk

44

Protected

20

Enforcing

15

Monitoring only

8

No DMARC

Where each one stands

OrganizationDMARC statusGrade
Abn Amro Bank Nvabnamro.comProtected (p=reject)A
AXA Banqueaxabanque.fr(corporate domain : axa.fr)Protected (p=reject)A
Banque BCPbanquebcp.frProtected (p=reject)A
Banque de Savoiebanque-de-savoie.frProtected (p=reject)A
Banque Delubac & Ciedelubac.comProtected (p=reject)A
Banque Francaise Commerciale Ocean Indienbfcoi.comProtected (p=reject)A
Banque Palatinepalatine.frProtected (p=reject)A
Banque Populairebanquepopulaire.frProtected (p=reject)A
BforBankbforbank.comProtected (p=reject)A
BNP Paribasbnpparibas.comProtected (p=reject)A
BNP Paribasbnpparibas.fr(corporate domain : bnpparibas.com)Protected (p=reject)A
BRED Banque Populairebred.frProtected (p=reject)A
BTP Banquebtp-banque.frProtected (p=reject)A
Caisse Credit Mutuel Merignaccmso.comProtected (p=reject)A
Caisse d'Épargnecaisse-epargne.frProtected (p=reject)A
Caisse Regionale De Credit Agricole Mutuel Brie Picardieca-briepicardie.comProtected (p=reject)A
Caisse Regionale De Credit Agricole Mutuel De Normandie-Seineca-normandie-seine.frProtected (p=reject)A
Caisse Regionale De Credit Agricole Mutuel Du Nord Estca-nordest.comProtected (p=reject)B
Caisse Regionale De Credit Agricole Mutuel Pyrenees Gascogneca-pyrenees-gascogne.frProtected (p=reject)A
CASDEN Banque Populairecasden.frProtected (p=reject)A
CCFccf.frProtected (p=reject)A
Citibank Europe Public Limited Companycitigroup.comProtected (p=reject)B
Commerzbank Aktiengesellschaftcommerzbank.frProtected (p=reject)A
Cooperatieve Rabobank U.a.rabobank.comProtected (p=reject)A
Crédit Agricole d'Île-de-Franceca-paris.com(corporate domain : credit-agricole.fr)Protected (p=reject)A
Crédit Agricole Provence Côte d'Azurcredit-agricole.frProtected (p=reject)A
Crédit Coopératifcredit-cooperatif.coopProtected (p=reject)A
Crédit Maritimecreditmaritime.frProtected (p=reject)A
Credit Mutuel Arkeacm-arkea.comProtected (p=reject)A
Crédit Mutuel de Bretagnecmb.frProtected (p=reject)A
Fortuneofortuneo.frProtected (p=reject)A
Hello bank!hellobank.frProtected (p=reject)A
HSBC Continental Europehsbc.frProtected (p=reject)A
Indosuez Wealth Managementca-indosuez.comProtected (p=reject)A
Ing Bank N.v.ingwb.comProtected (p=reject)A
Neuflize OBCneuflizeobc.frProtected (p=reject)A
Nickelnickel.euProtected (p=reject)A
Oneyoney.frProtected (p=reject)A
Qontoqonto.comProtected (p=reject)A
Rothschild & Corothschildandco.comProtected (p=reject)A
Société Généralesg.fr(corporate domain : societegenerale.com)Protected (p=reject)A
Société Généralesocietegenerale.comProtected (p=reject)A
Standard Chartered Bank Agsc.comProtected (p=reject)A
Ubs Europe Seubs.comProtected (p=reject)A
Banque De Francebanque-france.frEnforcing (p=quarantine)B
Banque Hottinguerbanque-hottinguer.comEnforcing (p=quarantine)B
Banque Transatlantiquebanquetransatlantique.comEnforcing (p=quarantine)B
BoursoBankboursobank.comEnforcing (p=quarantine)B
CICcic.frEnforcing (p=quarantine)B
Crédit Mutuel Île-de-Francecreditmutuel.frEnforcing (p=quarantine)C
Empruntisempruntis.comEnforcing (p=quarantine)B
Floafloabank.frEnforcing (p=quarantine)C
Immopretimmopret.frEnforcing (p=quarantine)B
Institut Emission Departements Outre Meriedom.frEnforcing (p=quarantine)B
Lazard Freres Banquelazardfreresbanque.frEnforcing (p=quarantine)C
Manager.onemanager.oneEnforcing (p=quarantine)B
Milleis Banquemilleis.frEnforcing (p=quarantine)B
Monabanqmonabanq.comEnforcing (p=quarantine)B
Propulse by CApropulsebyca.frEnforcing (p=quarantine)C
Qatar National Bankqnb.comEnforcing (p=quarantine)B
Shineshine.frEnforcing (p=quarantine)B
State Street Bank International Gmbhstatestreet.comEnforcing (p=quarantine)B
Sumeriasumeria.eu(corporate domain : sumeria.fr)Enforcing (p=quarantine)B
Taulia Uk Ltdtaulia.comEnforcing (p=quarantine)B
Allfunds Bank S A Uallfundsbank.comMonitoring only (p=none)D
Banque Richelieu Francebanquerichelieu.comMonitoring only (p=none)F
Banque Wormser Frèresbanquewormser.comMonitoring only (p=none)D
Blankblank.appMonitoring only (p=none)D
Bpifrancebpifrance.frMonitoring only (p=none)D
Caisse De Credit Municipal De Lyoncredit-municipal-lyon.frMonitoring only (p=none)D
Caixa Geral De Depositoscgd.frMonitoring only (p=none)D
Capelli Financementcapelli-immobilier.frMonitoring only (p=none)F
Chaabi Bankchaabibank.frMonitoring only (p=none)D
Green-Gotgreen-got.comMonitoring only (p=none)D
Helioshelios.doMonitoring only (p=none)D
La Banque Postalelabanquepostale.frMonitoring only (p=none)D
LCLlcl.frMonitoring only (p=none)D
Market Pay Techmarket-pay.comMonitoring only (p=none)D
Pixpaypixpay.frMonitoring only (p=none)D
Attijariwafa Bank Europeattijariwafabank-europe.frNo DMARCF
Banque Francaise Mutualistebanquefrancaisemutualiste.frNo DMARCF
Blot Financementblotfinancement.comNo DMARCF
Caisse d'Epargne CEPACcaissedepargne-cepac.frNo DMARCF
Edmond de Rothschildedmond-de-rothschild.comNo DMARCF
Mobilis Banquemobilis-banque.comNo DMARCF
My Money Bankmymoneybank.frNo DMARCF
Socram Banquesocram-banque.frNo DMARCF
Banco Santander Sasantandercib.frNot measuredF

Previous editions

Methodology

We read each organization's public DNS — the DMARC record on its consumer-facing domain — and classify the published policy (none / quarantine / reject). "Protected" means an enforced p=reject policy. Only public data is used; figures reflect the edition date and can change as records are updated.