BEC explodes as attackers exploit email’s identity crisis
Email is having an identity crisis. Although the first email was sent almost 50 years ago, the standards for Internet email never evolved to include robust sender identity validation.
The Summer 2019 Email Fraud Landscape report shows that despite a 5X increase in the number of DMARC records worldwide, there is still a long way to go. DMARC, even when it’s used, is usually not deployed with an enforcement policy (one that directs mail receivers to keep unauthenticated email out of recipients’ inboxes).
Valimail’s ongoing research shows how the fight against fake email is progressing worldwide, in a variety of industry categories. Nevertheless, it’s clear that robust sender identity solutions are needed to end this identity crisis for email.
Download the report for more information on these key findings:
- 850,000 domains worldwide now have DMARC records
- 5x increase in the number of DMARC records in 3 years
- Just under 17% of global DMARC records are at enforcement
- In most industry categories, fewer than 10% of enterprise domains are protected from impersonation
- Despite the growth in enterprise DMARC usage, only one in five enterprise DMARC records is at enforcement
- Less than half of large U.S. tech companies’ DMARC records are at enforcement — and that’s a relatively high rate of success
- 93% of U.S. government DMARC records are at enforcement
