How DMARC can help banks win back trust

How often does your insurer ever run special offers, incentive programs, provide useful advice, or launch new customer service initiatives? Not sure?

We can’t say that we’re surprised, after all, why would you? Unless you’ve had to change or renew one of your insurance policies there’s no reason to know. Most of us don’t spend our precious spare time checking our insurers’ websites or Facebook feeds to see what they’re up to.

As a rule of thumb, this logic applies to the majority of the financial services industry. Even if customers are logging into their online banking, they’re doing it to check their balance or transfer money, not to investigate their secure messages inbox in the hope of receiving some special banking offer.

The problem with financial services emails

The problem with emails from financial services started years ago when savvy internet users learned to ignore and delete email correspondence from anyone purporting to be a financial service provider.

Chances were, of course, that these emails were fraudulent and highly likely to be phishing attacks aimed at getting hold of confidential details like passwords or bank account details.

To make matters worse, back in the old days of spam and phishing messages, these emails weren’t even properly targeted. This meant that people would regularly receive messages from banks that they had no relationship with, and so they’d hit that delete button even faster, sealing the fate of emails from financial services and banks everywhere.

dmarc-for-banks

Secure messaging inboxes are too clunky for customers

So far, so familiar right? Fast-forward to the present day, and financial services firms are beginning to admit defeat, they know that the clunky, in-app, ‘secure messaging inboxes’ don’t really work, and it’s time to start properly engaging with customers via email.

And herein lies the problem. From digital natives to digital novices and even digital latecomers, we’ve all spent the last 10 years or more avoiding email correspondence claiming to be from our ‘trusted financial services providers.’

Even if messages don’t get marked as spam on the way into the inbox, we often still assume they’re fraudulent once they arrive. From PayPal to HSBC Bank of Ireland, all of these brands are being consistently tarred by phishing scam brush.

Sure, they’re successful businesses, but that doesn’t take away from the fact that they receive a daily, global reputation bashing that prevents them from running their business more efficiently and profitably.

Why all financial services firms need to implement DMARC

Financial services firms have genuinely embraced the digital age  –  just look at internet and mobile banking. Gone are the days of trekking out on your lunch break to your local bank branch, there’s been a raft of services revolutionized in recent years.

So why are some banks still failing to address the email authenticity and deliverability issue that still plagues them across the entire web? We’re referring to the anti-phishing solution DMARC (Domain-Based Message Authentication, Reporting, & Conformance). This email authentication protocol not only protects domains against exact impersonation (otherwise known as spoofing) but also improves email deliverability too. You can find out more about how it works here.

By implementing DMARC at a policy of p=reject, banks, insurance companies, and financial services as a whole can make sure they’re getting into the inbox and begin to rebuild trust in the emails they’re sending out to customers. Being DMARC-authenticated also makes businesses eligible for BIMI too. This new standard shows trademarked logos on DMARC-validated emails, and has been found to have a significant positive impact on how consumers interact with them too.

Enjoy a free OnDMARC trial

There’s a whole host of security and business benefits to be gained by implementing DMARC, particularly for a sector that relies so heavily on consumer trust. Interested in seeing how it could help your business? Why not sign up for a 14-day free OnDMARC trial. OnDMARC is Red Sift’s award-winning DMARC tool that makes implementing and monitoring DMARC quick and easy.

free trial red sift

PUBLISHED BY

Clare Holmes

7 Sep. 2017

SHARE ARTICLE:

Recent Posts

VIEW ALL
News

Introducing DNS Guardian: Stop impersonation and spam caused by domain takeovers 

Rahul Powar

tl;dr: We’re thrilled to announce DNS Guardian — a new feature in Red Sift OnDMARC that can swiftly identify and stop domain takeovers that lead to malicious mail. Back in February, we shared updates with the community about SubdoMailing – an attack discovered by Guardio Labs. The attack was a form of subdomain takeover,…

Read more
Email

“What’s Next for DMARC”: Red Sift & Inbox Monster Webinar Recap

Red Sift

The recent webinar hosted by Inbox Monster, “What’s Next for DMARC: Data & Predictions for a New Era in Email Authentication,” featured insights from Red Sift and examined the significant changes brought by Yahoo and Google’s bulk sender requirements earlier this year.  It also offered a forward-looking perspective on the future of email authentication.…

Read more
Security

Navigating the Information Security Landscape: ISO 27001 vs. SOC 2

Red Sift

As cyber threats evolve, so do the standards and frameworks designed to combat them. Two of the most recognized standards in information security are ISO 27001 and SOC 2. What sets them apart, and which one is right for your organization? Let’s delve into the key differences. Purpose and Scope: Global Framework vs. Client-Centric…

Read more
News

G2 Summer 2024 Report: Red Sift OnDMARC’s Winning Streak Continues

Francesca Rünger-Field

We’re delighted to announce that Red Sift OnDMARC has again been named a Leader in G2’s DMARC category for Summer 2024. This recognition is based on our high Customer Satisfaction scores and strong market presence. Red Sift appeared in 11 reports – 5 new ones since Spring 2024! – earning 5 badges: A few…

Read more
News

Google will no longer trust Entrust certificates from October 2024

Red Sift

Tl;dr: Google has announced that as of October 31, 2024, Chrome will no longer trust certificates signed by Entrust root certificates. While there is no immediate impact on existing certificates or those issued before 31st October 2024, organizations should start reviewing their estate now. On Thursday 27th June 2024, Google announced that it had…

Read more