Most Financial Institutions Have DMARC. Almost None Are Protected.
PowerDMARC, Wednesday, July 22nd, 2026
Banking leads all sectors on DMARC adoption, but adoption is not protection and most banks never reach p=reject.
Financial services consistently ranks among the top one or two sectors nationally for having a DMARC record, well ahead of retail, healthcare and government.
Across the six countries PowerDMARC studied, banking is the best-enforced or near-best-enforced sector, typically landing between 40% and the low 60s percent on p=reject, meaning roughly a third to 60% of financial institutions still do not block a spoofed email outright.
Most research covers only the largest banks, while the FTC Safeguards Rule has since 2024 covered any business providing financial services, down to a car dealership handling loan applications. EasyDMARC found only 7.7% of the world's top 1.8 million email domains are fully protected with p=reject.