Protecting Charities with DMARC

The majority of us donate money to charity and in turn, charities do some truly inspiring and amazing work that benefits the wider community. But the vast amount of money that charities receive on a daily basis combined with the fact they are generally slower to adopt the latest cybersecurity defenses makes them a prime target for cybercriminals.

In 2017 99% of charities were vulnerable to impersonation

In 2017, Red Sift conducted research into the charity sector and analyzed more than 78,000 charity domains in the UK. The results showed that less than 1% of charities in the UK were protected against email impersonation/fraud.

This means that 99% of UK charities aren’t taking sufficient measures to make sure the donations they receive and the information they hold are protected against phishing. You can read and download the full Charity Industry Report here.

How DMARC can help protect charities worldwide

A simple way for charities to protect themselves from exact domain impersonation and fraud is by implementing a strong DMARC policy. DMARC is an email security protocol that when implemented at p=reject protects your domain from being impersonated by cybercriminals and used in some of the most advanced phishing attacks.

In the past, implementing DMARC was difficult, expensive, and time-consuming. But with OnDMARC, it’s become a straightforward process. OnDMARC guides users to full DMARC protection with simple step-by-step actions and easy-to-use dashboards.

The Turing Trust stopped more than 50 malicious senders with OnDMARC

Thanks to Red Sift’s OnDMARC, The Turing Trust successfully blocked over 50 malicious sources from sending phishing emails on their behalf, protecting their organization and anyone communicating with them. They also managed to increase the deliverability of their authorized emails, massively benefitting their work. You can read the full story here.

Free basic OnDMARC membership for all charities

Following the findings from Red Sift’s Charity Industry Report, we’re offering OnDMARC Basic plans to all charities for free. We believe the work that charities do for the wider community is essential and the price of security software, as well as the difficulty of implementation, has been a barrier to DMARC adoption for many charities.

We hope that through our Free for Charities program we will be able to encourage higher adoption of the DMARC protocol in the charity industry and ultimately help reduce the number of successful cyberattacks targeted at this sector.

Why not get in touch below, to find out if you’re eligible? You can also find out more about our Free for Charities program here.

Get in touch

PUBLISHED BY

Red Sift

25 Jul. 2017

SHARE ARTICLE:

Categories

Recent Posts

VIEW ALL
DMARC

Navigating G-Cloud 14 for DMARC solutions: A guide for former NCSC Mail…

Francesca Rünger-Field

Navigating G-Cloud 14 for DMARC solutions: A guide for former NCSC Mail Check users With the NCSC discontinuing key features of its Mail Check service, including DMARC aggregate and TLS reporting, after March 2025, UK public sector organisations must prepare for this change by transitioning to alternative email security solutions. To support this shift,…

Read more
DMARC

Mail Check is changing: What UK public sector organisations must know about…

Jack Lilley

The National Cyber Security Centre (NCSC) has suggested a change to Mail Check services starting on 24 March 2025. This change mainly involves ending DMARC aggregate reporting. This change comes as a measure to expand the services provided by Mail Check to any UK based organisation, while also limiting the cost and complexity of…

Read more
DMARC

Beyond DMARC: How Red Sift OnDMARC supports comprehensive DNS hygiene

Red Sift

Registrable domains and DNS play a crucial role in establishing online identity and trust, but their importance is often taken for granted. During new service setups, record updates are often overlooked, accumulating outdated entries. As infrastructure teams become increasingly overstretched,  services may be incorrectly shut down without proper cleanup, leaving behind a sprawl of…

Read more
DKIM

First look at DKIM2: The next generation of DKIM

Red Sift

In 2011, the original DomainKeys Identified Mail (DKIM1) standard was published. It outlined a method allowing a domain to sign emails, enabling recipients to verify that the email originated from an entity holding a private key that matches the public key published in the domain’s DNS records. Now in 2024, DKIM is ready for…

Read more