You're viewing the July 2026 edition (archived). See the latest edition →
banks · France
26% of France's banks are not protected against email spoofing
Public DMARC posture of 88 banks. Edition of July 2026.
How it has evolved
44
Protected
20
Enforcing
15
Monitoring only
8
No DMARC
Where each one stands
| Organization | DMARC status | Grade |
|---|---|---|
| Abn Amro Bank Nvabnamro.com | Protected (p=reject) | A |
| AXA Banqueaxabanque.fr(corporate domain : axa.fr) | Protected (p=reject) | A |
| Banque BCPbanquebcp.fr | Protected (p=reject) | A |
| Banque de Savoiebanque-de-savoie.fr | Protected (p=reject) | A |
| Banque Delubac & Ciedelubac.com | Protected (p=reject) | A |
| Banque Francaise Commerciale Ocean Indienbfcoi.com | Protected (p=reject) | A |
| Banque Palatinepalatine.fr | Protected (p=reject) | A |
| Banque Populairebanquepopulaire.fr | Protected (p=reject) | A |
| BforBankbforbank.com | Protected (p=reject) | A |
| BNP Paribasbnpparibas.com | Protected (p=reject) | A |
| BNP Paribasbnpparibas.fr(corporate domain : bnpparibas.com) | Protected (p=reject) | A |
| BRED Banque Populairebred.fr | Protected (p=reject) | A |
| BTP Banquebtp-banque.fr | Protected (p=reject) | A |
| Caisse Credit Mutuel Merignaccmso.com | Protected (p=reject) | A |
| Caisse d'Épargnecaisse-epargne.fr | Protected (p=reject) | A |
| Caisse Regionale De Credit Agricole Mutuel Brie Picardieca-briepicardie.com | Protected (p=reject) | A |
| Caisse Regionale De Credit Agricole Mutuel De Normandie-Seineca-normandie-seine.fr | Protected (p=reject) | A |
| Caisse Regionale De Credit Agricole Mutuel Du Nord Estca-nordest.com | Protected (p=reject) | B |
| Caisse Regionale De Credit Agricole Mutuel Pyrenees Gascogneca-pyrenees-gascogne.fr | Protected (p=reject) | A |
| CASDEN Banque Populairecasden.fr | Protected (p=reject) | A |
| CCFccf.fr | Protected (p=reject) | A |
| Citibank Europe Public Limited Companycitigroup.com | Protected (p=reject) | B |
| Commerzbank Aktiengesellschaftcommerzbank.fr | Protected (p=reject) | A |
| Cooperatieve Rabobank U.a.rabobank.com | Protected (p=reject) | A |
| Crédit Agricole d'Île-de-Franceca-paris.com(corporate domain : credit-agricole.fr) | Protected (p=reject) | A |
| Crédit Agricole Provence Côte d'Azurcredit-agricole.fr | Protected (p=reject) | A |
| Crédit Coopératifcredit-cooperatif.coop | Protected (p=reject) | A |
| Crédit Maritimecreditmaritime.fr | Protected (p=reject) | A |
| Credit Mutuel Arkeacm-arkea.com | Protected (p=reject) | A |
| Crédit Mutuel de Bretagnecmb.fr | Protected (p=reject) | A |
| Fortuneofortuneo.fr | Protected (p=reject) | A |
| Hello bank!hellobank.fr | Protected (p=reject) | A |
| HSBC Continental Europehsbc.fr | Protected (p=reject) | A |
| Indosuez Wealth Managementca-indosuez.com | Protected (p=reject) | A |
| Ing Bank N.v.ingwb.com | Protected (p=reject) | A |
| Neuflize OBCneuflizeobc.fr | Protected (p=reject) | A |
| Nickelnickel.eu | Protected (p=reject) | A |
| Oneyoney.fr | Protected (p=reject) | A |
| Qontoqonto.com | Protected (p=reject) | A |
| Rothschild & Corothschildandco.com | Protected (p=reject) | A |
| Société Généralesg.fr(corporate domain : societegenerale.com) | Protected (p=reject) | A |
| Société Généralesocietegenerale.com | Protected (p=reject) | A |
| Standard Chartered Bank Agsc.com | Protected (p=reject) | A |
| Ubs Europe Seubs.com | Protected (p=reject) | A |
| Banque De Francebanque-france.fr | Enforcing (p=quarantine) | B |
| Banque Hottinguerbanque-hottinguer.com | Enforcing (p=quarantine) | B |
| Banque Transatlantiquebanquetransatlantique.com | Enforcing (p=quarantine) | B |
| BoursoBankboursobank.com | Enforcing (p=quarantine) | B |
| CICcic.fr | Enforcing (p=quarantine) | B |
| Crédit Mutuel Île-de-Francecreditmutuel.fr | Enforcing (p=quarantine) | C |
| Empruntisempruntis.com | Enforcing (p=quarantine) | B |
| Floafloabank.fr | Enforcing (p=quarantine) | C |
| Immopretimmopret.fr | Enforcing (p=quarantine) | B |
| Institut Emission Departements Outre Meriedom.fr | Enforcing (p=quarantine) | B |
| Lazard Freres Banquelazardfreresbanque.fr | Enforcing (p=quarantine) | C |
| Manager.onemanager.one | Enforcing (p=quarantine) | B |
| Milleis Banquemilleis.fr | Enforcing (p=quarantine) | B |
| Monabanqmonabanq.com | Enforcing (p=quarantine) | B |
| Propulse by CApropulsebyca.fr | Enforcing (p=quarantine) | C |
| Qatar National Bankqnb.com | Enforcing (p=quarantine) | B |
| Shineshine.fr | Enforcing (p=quarantine) | B |
| State Street Bank International Gmbhstatestreet.com | Enforcing (p=quarantine) | B |
| Sumeriasumeria.eu(corporate domain : sumeria.fr) | Enforcing (p=quarantine) | B |
| Taulia Uk Ltdtaulia.com | Enforcing (p=quarantine) | B |
| Allfunds Bank S A Uallfundsbank.com | Monitoring only (p=none) | D |
| Banque Richelieu Francebanquerichelieu.com | Monitoring only (p=none) | F |
| Banque Wormser Frèresbanquewormser.com | Monitoring only (p=none) | D |
| Blankblank.app | Monitoring only (p=none) | D |
| Bpifrancebpifrance.fr | Monitoring only (p=none) | D |
| Caisse De Credit Municipal De Lyoncredit-municipal-lyon.fr | Monitoring only (p=none) | D |
| Caixa Geral De Depositoscgd.fr | Monitoring only (p=none) | D |
| Capelli Financementcapelli-immobilier.fr | Monitoring only (p=none) | F |
| Chaabi Bankchaabibank.fr | Monitoring only (p=none) | D |
| Green-Gotgreen-got.com | Monitoring only (p=none) | D |
| Helioshelios.do | Monitoring only (p=none) | D |
| La Banque Postalelabanquepostale.fr | Monitoring only (p=none) | D |
| LCLlcl.fr | Monitoring only (p=none) | D |
| Market Pay Techmarket-pay.com | Monitoring only (p=none) | D |
| Pixpaypixpay.fr | Monitoring only (p=none) | D |
| Attijariwafa Bank Europeattijariwafabank-europe.fr | No DMARC | F |
| Banque Francaise Mutualistebanquefrancaisemutualiste.fr | No DMARC | F |
| Blot Financementblotfinancement.com | No DMARC | F |
| Caisse d'Epargne CEPACcaissedepargne-cepac.fr | No DMARC | F |
| Edmond de Rothschildedmond-de-rothschild.com | No DMARC | F |
| Mobilis Banquemobilis-banque.com | No DMARC | F |
| My Money Bankmymoneybank.fr | No DMARC | F |
| Socram Banquesocram-banque.fr | No DMARC | F |
| Banco Santander Sasantandercib.fr | Not measured | F |
Previous editions
Methodology
We read each organization's public DNS — the DMARC record on its consumer-facing domain — and classify the published policy (none / quarantine / reject). "Protected" means an enforced p=reject policy. Only public data is used; figures reflect the edition date and can change as records are updated.
