banks · Belgium
14% of Belgium's banks are not protected against email spoofing
Public DMARC posture of 28 banks. Edition of June 2026.
19
Protected
5
Enforcing
4
Monitoring only
0
No DMARC
Where each one stands
| Organization | DMARC status | Grade |
|---|---|---|
| ABN AMRO MeesPiersonabnamromeespierson.be | Protected (p=reject) | A |
| Argentaargenta.be | Protected (p=reject) | A |
| Belfiusbelfius.be | Protected (p=reject) | B |
| BNP Paribas Fortisbnpparibasfortis.be(corporate domain : bnpparibas.be) | Protected (p=reject) | A |
| CBC Banque & Assurancecbc.be | Protected (p=reject) | A |
| Crelancrelan.be | Protected (p=reject) | A |
| Degroof Petercamdegroofpetercam.com | Protected (p=reject) | B |
| Delen Private Bankdelen.bank | Protected (p=reject) | B |
| Deutsche Bank Belgiumdeutschebank.be | Protected (p=reject) | A |
| Europabankeuropabank.be | Protected (p=reject) | A |
| Hello bank!hellobank.be | Protected (p=reject) | A |
| ING Belgiuming.be | Protected (p=reject) | A |
| KBC Bankkbc.be(corporate domain : kbc.com) | Protected (p=reject) | A |
| KBC Brusselskbcbrussels.be | Protected (p=reject) | A |
| Keytrade Bankkeytradebank.be | Protected (p=reject) | A |
| Mercier Van Lanschotmerciervanlanschot.be | Protected (p=reject) | A |
| Puilaetcopuilaetco.be | Protected (p=reject) | A |
| Triodos Banktriodos.be | Protected (p=reject) | A |
| vdk bankvdk.be | Protected (p=reject) | A |
| Aion Bankaion.eu(corporate domain : aion.be) | Enforcing (p=quarantine) | B |
| Banque Transatlantique Belgiumbanquetransatlantique.be | Enforcing (p=quarantine) | B |
| Beobankbeobank.be | Enforcing (p=quarantine) | C |
| MeDirectmedirect.be | Enforcing (p=quarantine) | B |
| NIBC Directnibc.be | Enforcing (p=quarantine) | F |
| Bank Van Bredabankvanbreda.be | Monitoring only (p=none) | D |
| CPH Banquecph.be | Monitoring only (p=none) | D |
| Nagelmackersnagelmackers.be | Monitoring only (p=none) | D |
| Santander Consumer Banksantanderconsumerbank.be | Monitoring only (p=none) | D |
Previous editions
Methodology
We read each organization’s public DNS — the DMARC record on its consumer-facing domain — and classify the published policy (none / quarantine / reject). “Protected” means an enforced p=reject policy. Only public data is used; figures reflect the edition date and can change as records are updated.