Skip to content

You're viewing the June 2026 edition (archived). See the latest edition →

banks · United Kingdom

16% of banks in the United Kingdom are not protected against email spoofing

Public DMARC posture of 50 banks. Edition of June 2026.

35

Protected

7

Enforcing

7

Monitoring only

1

No DMARC

How it has evolved

At-risk over timeShare not protected against spoofing across 4 monthly editions.20%0%16%2026-0610%2026-0710%2026-0810%2026-09
% at risk

Methodology

We read each organization's public DNS — the DMARC record on its consumer-facing domain — and classify the published policy (none / quarantine / reject). "Protected" means an enforced p=reject policy. Only public data is used; figures reflect the edition date and can change as records are updated.

Previous editions

An extract, status by status

40 of the 50 banks, up to 25 per status, in alphabetical order. The full list — with search, filters and sorting — lives in the Rankings.

The full list of banks lives in the Rankings, with search, filters and sorting. Open the Rankings →

Protected (p=reject)35 organisations

Protected (p=reject): 25 organisations out of 35, in alphabetical order
OrganizationGrade
Allica Bankallica.bankA
Bank of Scotlandbankofscotland.co.ukA
Barclaysbarclays.co.uk(corporate domain : home.barclays)A
Chase UKchase.co.ukA
Close Brothersclosebrothers.comA
Couttscoutts.comA
Cumberland Building Societycumberland.co.ukA
First Directfirstdirect.comA
Halifaxhalifax.co.ukA
Handelsbanken UKhandelsbanken.co.ukA
HSBC UKhsbc.co.uk(corporate domain : hsbc.com)A
Investecinvestec.comA
Krookroo.comA
Leeds Building Societyleedsbuildingsociety.co.ukA
Lloyds Banklloydsbank.com(corporate domain : lloydsbank.co.uk)A
Marcusmarcus.co.ukA
Metro Bankmetrobankonline.co.ukA
Mettlemettle.co.ukA
Monzomonzo.comA
Nationwidenationwide.co.ukA
NatWestnatwest.com(corporate domain : natwestgroup.com)A
Newcastle Building Societynewcastle.co.ukA
OakNorthoaknorth.co.ukA
Paragon Bankparagonbank.co.ukA
Royal Bank of Scotlandrbs.co.ukA

Protected (p=reject): see the full list in the Rankings →

Enforcing (p=quarantine)7 organisations

Enforcing (p=quarantine): 7 organisations out of 7, in alphabetical order
OrganizationGrade
Aldermorealdermore.co.ukC
Chipgetchip.ukC
Cynergy Bankcynergybank.co.ukB
Monesemonese.comB
Revolutrevolut.comB
Shawbrook Bankshawbrook.co.ukB
Tandem Banktandem.co.ukB

Monitoring only (p=none)7 organisations

Monitoring only (p=none): 7 organisations out of 7, in alphabetical order
OrganizationGrade
Atom Bankatombank.co.ukD
C. Hoare & Cohoaresbank.co.ukD
Coventry Building Societycoventrybuildingsociety.co.ukD
Monumentmonument.coD
Nottingham Building Societythenottingham.comD
Principality Building Societyprincipality.co.ukD
West Brom Building Societywestbrom.co.ukD

No DMARC1 organisation

No DMARC: 1 organisation out of 1, in alphabetical order
OrganizationGrade
Arbuthnot Lathamarbuthnotlatham.co.ukF