banks · United Kingdom
16% of United Kingdom's banks are not protected against email spoofing
Public DMARC posture of 50 banks. Edition of June 2026.
35
Protected
7
Enforcing
7
Monitoring only
1
No DMARC
Where each one stands
| Organization | DMARC status | Grade |
|---|---|---|
| Allica Bankallica.bank | Protected (p=reject) | A |
| Bank of Scotlandbankofscotland.co.uk | Protected (p=reject) | A |
| Barclaysbarclays.co.uk(corporate domain : home.barclays) | Protected (p=reject) | A |
| Chase UKchase.co.uk | Protected (p=reject) | A |
| Close Brothersclosebrothers.com | Protected (p=reject) | A |
| Couttscoutts.com | Protected (p=reject) | A |
| Cumberland Building Societycumberland.co.uk | Protected (p=reject) | A |
| First Directfirstdirect.com | Protected (p=reject) | A |
| Halifaxhalifax.co.uk | Protected (p=reject) | A |
| Handelsbanken UKhandelsbanken.co.uk | Protected (p=reject) | A |
| HSBC UKhsbc.co.uk(corporate domain : hsbc.com) | Protected (p=reject) | A |
| Investecinvestec.com | Protected (p=reject) | A |
| Krookroo.com | Protected (p=reject) | A |
| Leeds Building Societyleedsbuildingsociety.co.uk | Protected (p=reject) | A |
| Lloyds Banklloydsbank.com(corporate domain : lloydsbank.co.uk) | Protected (p=reject) | A |
| Marcusmarcus.co.uk | Protected (p=reject) | A |
| Metro Bankmetrobankonline.co.uk | Protected (p=reject) | A |
| Mettlemettle.co.uk | Protected (p=reject) | A |
| Monzomonzo.com | Protected (p=reject) | A |
| Nationwidenationwide.co.uk | Protected (p=reject) | A |
| NatWestnatwest.com(corporate domain : natwestgroup.com) | Protected (p=reject) | A |
| Newcastle Building Societynewcastle.co.uk | Protected (p=reject) | A |
| OakNorthoaknorth.co.uk | Protected (p=reject) | A |
| Paragon Bankparagonbank.co.uk | Protected (p=reject) | A |
| Royal Bank of Scotlandrbs.co.uk | Protected (p=reject) | A |
| Santander UKsantander.co.uk | Protected (p=reject) | A |
| Skipton Building Societyskipton.co.uk | Protected (p=reject) | A |
| Starling Bankstarlingbank.com | Protected (p=reject) | A |
| The Co-operative Bankco-operativebank.co.uk | Protected (p=reject) | A |
| Tidetide.co | Protected (p=reject) | A |
| TSBtsb.co.uk | Protected (p=reject) | A |
| Virgin Moneyvirginmoney.com | Protected (p=reject) | A |
| Weatherbys Bankweatherbys.bank | Protected (p=reject) | A |
| Yorkshire Building Societyybs.co.uk | Protected (p=reject) | A |
| Zopazopa.com | Protected (p=reject) | A |
| Aldermorealdermore.co.uk | Enforcing (p=quarantine) | C |
| Chipgetchip.uk | Enforcing (p=quarantine) | C |
| Cynergy Bankcynergybank.co.uk | Enforcing (p=quarantine) | B |
| Monesemonese.com | Enforcing (p=quarantine) | B |
| Revolutrevolut.com | Enforcing (p=quarantine) | B |
| Shawbrook Bankshawbrook.co.uk | Enforcing (p=quarantine) | B |
| Tandem Banktandem.co.uk | Enforcing (p=quarantine) | B |
| Atom Bankatombank.co.uk | Monitoring only (p=none) | D |
| C. Hoare & Cohoaresbank.co.uk | Monitoring only (p=none) | D |
| Coventry Building Societycoventrybuildingsociety.co.uk | Monitoring only (p=none) | D |
| Monumentmonument.co | Monitoring only (p=none) | D |
| Nottingham Building Societythenottingham.com | Monitoring only (p=none) | D |
| Principality Building Societyprincipality.co.uk | Monitoring only (p=none) | D |
| West Brom Building Societywestbrom.co.uk | Monitoring only (p=none) | D |
| Arbuthnot Lathamarbuthnotlatham.co.uk | No DMARC | F |
Previous editions
Methodology
We read each organization’s public DNS — the DMARC record on its consumer-facing domain — and classify the published policy (none / quarantine / reject). “Protected” means an enforced p=reject policy. Only public data is used; figures reflect the edition date and can change as records are updated.