You're viewing the August 2026 edition (archived). See the latest edition →
banks · United Kingdom
10% of banks in the United Kingdom are not protected against email spoofing
Public DMARC posture of 50 banks. Edition of August 2026.
36
Protected
9
Enforcing
4
Monitoring only
1
No DMARC
How it has evolved
Methodology
We read each organization's public DNS — the DMARC record on its consumer-facing domain — and classify the published policy (none / quarantine / reject). "Protected" means a p=reject policy enforced on all mail. A policy published with pct below 100 counts one step lower — only that share of mail receives it — and a domain publishing several DMARC records is classified invalid, since none of them applies. This rule has applied since 7 October 2026; earlier editions classified on p= alone. Only public data is used; figures reflect the edition date and can change as records are updated.
Previous editions
An extract, status by status
39 of the 50 banks, up to 25 per status, in alphabetical order. The full list — with search, filters and sorting — lives in the Rankings.
The full list of banks lives in the Rankings, with search, filters and sorting. Open the Rankings →
Protected (p=reject)36 organisations
| Organization | Grade |
|---|---|
| Allica Bankallica.bank | A |
| Bank of Scotlandbankofscotland.co.uk | A |
| Barclaysbarclays.co.uk(corporate domain : home.barclays) | A |
| Chase UKchase.co.uk | A |
| Close Brothersclosebrothers.com | A |
| Couttscoutts.com | A |
| Cumberland Building Societycumberland.co.uk | A |
| First Directfirstdirect.com | A |
| Halifaxhalifax.co.uk | A |
| Handelsbanken UKhandelsbanken.co.uk | A |
| HSBC UKhsbc.co.uk(corporate domain : hsbc.com) | A |
| Investecinvestec.com | A |
| Krookroo.com | A |
| Leeds Building Societyleedsbuildingsociety.co.uk | A |
| Lloyds Banklloydsbank.com(corporate domain : lloydsbank.co.uk) | A |
| Marcusmarcus.co.uk | A |
| Metro Bankmetrobankonline.co.uk | A |
| Mettlemettle.co.uk | A |
| Monzomonzo.com | A |
| Nationwidenationwide.co.uk | A |
| NatWestnatwest.com(corporate domain : natwestgroup.com) | A |
| Newcastle Building Societynewcastle.co.uk | A |
| Nottingham Building Societythenottingham.com | A |
| OakNorthoaknorth.co.uk | A |
| Paragon Bankparagonbank.co.uk | A |
Enforcing (p=quarantine)9 organisations
| Organization | Grade |
|---|---|
| Aldermorealdermore.co.uk | C |
| Chipgetchip.uk | C |
| Cynergy Bankcynergybank.co.uk | B |
| Monesemonese.com | B |
| Principality Building Societyprincipality.co.uk | C |
| Revolutrevolut.com | B |
| Shawbrook Bankshawbrook.co.uk | B |
| Tandem Banktandem.co.uk | B |
| West Brom Building Societywestbrom.co.uk | C |
Monitoring only (p=none)4 organisations
| Organization | Grade |
|---|---|
| Atom Bankatombank.co.uk | D |
| C. Hoare & Cohoaresbank.co.uk | D |
| Coventry Building Societycoventrybuildingsociety.co.uk | D |
| Monumentmonument.co | D |
No DMARC1 organisation
| Organization | Grade |
|---|---|
| Arbuthnot Lathamarbuthnotlatham.co.uk | F |