Don’t return to sender: Make sure you have email security fit for 2024

With the recent news that Google and Yahoo are mandating a new set of security requirements for email delivery from February 2024, it’s more important than ever that you understand exactly how your email campaigns will be impacted. 

Luckily, for once it’s nice and clear, for senders mailing out more than 5,000 emails a day to Gmail addresses, Google will require a set of authentication measures to be met to ensure they get delivered to its inboxes. It’s expected Yahoo will follow suit. 

Put simply, failure to comply means emails sent to Gmail and Yahoo inboxes might not be delivered as expected or might be marked as spam. That’s a whole lot of Marketing campaigns, product update emails, and invoices that are not going to be received. 

Every cloud…

It might seem that these new security standards are here just to make our lives harder, or at least in the short term, give us more work to do as we set about configuring our email security accordingly. However, there is a reward at the end of it!

Obviously having your domains correctly configured and protected against impersonation is a reward in and of itself; not losing data, money or reputation damage, that’s all priceless. 

If you want an easy way to make sure your email-sending domains are ready come February 1, 2024, Red Sift makes it easy. 

Our free Investigate tool checks how you stack up with Google and Yahoo’s requirements and provides a visual breakdown of exactly what you need to action. It will take you less than a minute to check each of your email-sending services.

But the carrot at the end of the Google/Yahoo stick is that a fully DMARC secured email domain can also get a Verified Mark Certificate. This would allow you to display your trademarked logo in recipients’ inboxes alongside all the email you send. 

Email open rates are a challenge at the best of times. This is made worse during peak seasons like Black Friday and Christmas when businesses everywhere bombard consumer inboxes with the latest discounts and deals.

But BIMI could be the next big thing for unlocking email open rates for good. In research carried out with our partner Entrust, we found that showing a registered logo in the avatar slot of an email increased opens by a whopping 38%. Good news for marketers everywhere. 

What’s coming up in 2024?

We know we’re kicking off the year with the Google and Yahoo changes but there may well be more changes to come to the world of BIMI. 

Gmail was one of the first mailbox providers to support BIMI in 2021. Now, two years later, they are building upon that foundation and have announced that they’ve added a verified checkmark and an informative tooltip for senders who have BIMI deployed with a VMC. 

This verification will allow users to easily distinguish between a certified BIMI logo, and a fake Google Account profile icon, which can be easily abused by an attacker.

We’ll be hosting a webinar with our good friends over at Entrust to dive into this topic a little deeper so join us on the 17th of January to learn more. 

Secure your spot today!

PUBLISHED BY

Red Sift

14 Dec. 2023

SHARE ARTICLE:

Categories

Recent Posts

VIEW ALL
AI

Staying ahead of AI-powered brand impersonation

Rahul Powar

Executive summary: AI has supercharged brand impersonation, with Q2 2024 seeing nearly half of all processed emails containing spoofing or phishing attempts—40% of which were AI-generated. The scale, speed, and sophistication of these attacks are overwhelming security teams, draining resources on false positives, and leaving critical threats undetected. Consumers are unforgiving when trust is…

Read more
BEC

What is email spoofing and how can you prevent it?

Faisal Misle

Executive summary: Email spoofing is a growing cyber threat where attackers forge the sender’s address to impersonate trusted sources, enabling phishing, business email compromise, and financial fraud. Because legacy email protocols like SMTP lack strong authentication, spoofing can bypass traditional filters. Organizations can mitigate this risk by implementing robust email authentication measures, especially DMARC.…

Read more
Email

What is social engineering and how can you prevent it?

Jack Lilley

Executive summary: Email phishing has evolved and criminals now use social engineering to impersonate executives, suppliers, and even government agencies, persuading recipients to approve payments or disclose credentials. Because human judgment sits at the heart of these attacks, technical controls that eliminate spoofed messages before they reach the inbox are essential. DMARC provides that…

Read more
Cybersecurity

Attackers are abusing Microsoft 365: Here’s how to stay protected

Jack Lilley

Executive summary: Varonis has surfaced an active phishing campaign that spoofs internal users by abusing Microsoft 365’s Direct Send feature. Because Direct Send doesn’t require authentication and is treated as “internal,” these messages often bypass the checks you rely on for outside mail. Microsoft now offers an opt-in switch, RejectDirectSend, to block the pathway,…

Read more