Gmail expands BIMI indicators to include a verified icon

Gmail was one of the first mailbox providers to support BIMI in 2021. Now, two years later, they are building upon that foundation and have announced that they’ve added a verified checkmark and an informative tooltip for senders who have BIMI deployed with a VMC. 

This verification will allow users to easily distinguish between a certified BIMI logo, and a fake Google Account profile icon, which can be easily abused by an attacker.

“Strong email authentication helps users and email security systems identify and stop spam, and also enables senders to leverage their brand trust. This increases confidence in email sources and gives readers an immersive experience, creating a better email ecosystem for everyone.”

Google

Get VMC verified and reap the benefits – or risk falling behind

With Google’s full support and enhanced visual clues for VMC-authenticated senders, Apple pioneering “digitally verified” messaging last fall, and Yahoo’s existing verification icons, these developments present an even stronger incentive for businesses to implement DMARC at enforcement and BIMI with a VMC. 

Red Sift’s award-winning DMARC solution, OnDMARC, is the only product on the market to offer an integrated, one-stop BIMI certification journey. Via Entrust, Red Sift has issued more VMCs than any other DMARC provider. 

Through our partnership with Entrust, we’re creating more value by enabling organizations to manage their logo and obtain VMCs from Entrust directly through OnDMARC. As a result, it’s easier than ever for brands to ensure a safe, immersive experience for recipients of their outbound emails.

Find out more about BIMI on our free BIMI resource page or get in touch today to book your free consultation with the team, and get started on your journey to better email with BIMI.

PUBLISHED BY

Faisal Misle

3 May. 2023

SHARE ARTICLE:

Categories

Recent Posts

VIEW ALL
BEC

The threat of Business Email Compromise in US healthcare

Jack Lilley

Executive summary: Business Email Compromise is siphoning billions from U.S. healthcare by exploiting human trust instead of software flaws. Spoofed or hijacked messages authorize fraudulent payments, spark ransomware, and expose patient data—causing crippling financial, operational, and compliance damage. Deploying DMARC, MFA, and rigorous multi-person payment checks is now critical. 3 key takeaways Business Email…

Read more
Email

Cloudflare selects Red Sift as a preferred partner to provide DMARC and…

Rebecca Warren

AI-generated email attacks are rapidly growing in scale and sophistication, demanding stronger defenses from at-risk organizations. Starting today, Red Sift is excited to announce a new strategic partnership with Cloudflare, the leading connectivity cloud company, to deliver its market-leading email security application, Red Sift OnDMARC, to a broader global audience.  Today’s alignment enhances Cloudflare’s…

Read more
Cybersecurity

New Zealand moves to mandate DMARC enforcement

Jack Lilley

Executive summary: New Zealand’s Secure Government Email Framework mandates DMARC at p=reject—plus hard-fail SPF, universal DKIM, enforced MTA-STS, and TLS-RPT—by October 2025. The rules replace SEEMail, curb soaring phishing losses, and will affect every organization that emails the public sector. Key takeaways: The New Zealand Government has recently published the Secure Government Email (SGE) Common…

Read more
BEC

DMARC: The best ROI for your organization

Jack Lilley

Executive summary: Implementing DMARC delivers one of the clearest, fastest returns on investment in email security. By authenticating outgoing mail and blocking spoofed messages, DMARC cuts the direct costs of phishing and Business Email Compromise, safeguards brand reputation, and boosts deliverability—ultimately driving revenue and trimming operational workload. Key takeaways: Email is a critical communication tool for…

Read more