Skip to content

banks · United Kingdom

10% of banks in the United Kingdom are not protected against email spoofing

Public DMARC posture of 50 banks. Edition of September 2026.

36

Protected

9

Enforcing

4

Monitoring only

1

No DMARC

How it has evolved

At-risk over timeShare not protected against spoofing across 4 monthly editions.20%0%16%2026-0610%2026-0710%2026-0810%2026-09
% at risk

Methodology

We read each organization's public DNS — the DMARC record on its consumer-facing domain — and classify the published policy (none / quarantine / reject). "Protected" means an enforced p=reject policy. Only public data is used; figures reflect the edition date and can change as records are updated.

Previous editions

An extract, status by status

39 of the 50 banks, up to 25 per status, in alphabetical order. The full list — with search, filters and sorting — lives in the Rankings.

The full list of banks lives in the Rankings, with search, filters and sorting. Open the Rankings →

Protected (p=reject)36 organisations

Protected (p=reject): 25 organisations out of 36, in alphabetical order
OrganizationGrade
Allica Bankallica.bankA
Bank of Scotlandbankofscotland.co.ukA
Barclaysbarclays.co.uk(corporate domain : home.barclays)A
Chase UKchase.co.ukA
Close Brothersclosebrothers.comA
Couttscoutts.comA
Cumberland Building Societycumberland.co.ukA
First Directfirstdirect.comA
Halifaxhalifax.co.ukA
Handelsbanken UKhandelsbanken.co.ukA
HSBC UKhsbc.co.uk(corporate domain : hsbc.com)A
Investecinvestec.comA
Krookroo.comA
Leeds Building Societyleedsbuildingsociety.co.ukA
Lloyds Banklloydsbank.com(corporate domain : lloydsbank.co.uk)A
Marcusmarcus.co.ukA
Metro Bankmetrobankonline.co.ukA
Mettlemettle.co.ukA
Monzomonzo.comA
Nationwidenationwide.co.ukA
NatWestnatwest.com(corporate domain : natwestgroup.com)A
Newcastle Building Societynewcastle.co.ukA
Nottingham Building Societythenottingham.comA
OakNorthoaknorth.co.ukA
Paragon Bankparagonbank.co.ukA

Protected (p=reject): see the full list in the Rankings →

Enforcing (p=quarantine)9 organisations

Enforcing (p=quarantine): 9 organisations out of 9, in alphabetical order
OrganizationGrade
Aldermorealdermore.co.ukC
Chipgetchip.ukC
Cynergy Bankcynergybank.co.ukB
Monesemonese.comB
Principality Building Societyprincipality.co.ukC
Revolutrevolut.comB
Shawbrook Bankshawbrook.co.ukB
Tandem Banktandem.co.ukB
West Brom Building Societywestbrom.co.ukC

Monitoring only (p=none)4 organisations

Monitoring only (p=none): 4 organisations out of 4, in alphabetical order
OrganizationGrade
Atom Bankatombank.co.ukD
C. Hoare & Cohoaresbank.co.ukD
Coventry Building Societycoventrybuildingsociety.co.ukD
Monumentmonument.coD

No DMARC1 organisation

No DMARC: 1 organisation out of 1, in alphabetical order
OrganizationGrade
Arbuthnot Lathamarbuthnotlatham.co.ukF