Each year since the DMARC protocol was first announced, more and more companies have found that it can help them monitor and protect email using their domains. Here are some notable companies or brands that began doing so in 2015, according to data provided by DMARC.org sponsor Farsight Security.
- Aflac (insurance)
- American Express (finance) †
- Apple Music (entertainment) †
- Blogspot (social media)
- Blue Shield of California (insurance)
- Computer Associates (computer software)
- Costco (retail)
- DHL (shipping) †
- Duke Energy (utility)
- Equinox (fitness)
- Expedia.com (travel)
- Federal Trade Commission, U.S. (government) †
- The Gap (apparel)
- Glaxo Smith Kline (pharmaceuticals)
- H&M (retail)
- Kickstarter (crowdsourcing) †
- Kroger (supermarkets)
- Old Navy (retail)
- Southwest Airlines (transportation)
- Uber (transportation) †
- Wachovia (finance) †
- Walmart (retail)
- Whirlpool (appliances)
- Wikipedia (social media)
- Wix (web/domain hosting) †
Readers can also check a longer list of Who is Using DMARC? that is not restricted to 2015. And this blog post tells you how to check to see if a given email sender is using DMARC.
Companies listed above with a † shown have set a strong DMARC policy requesting that no fraudulent messages be delivered to the inbox. Companies without this character shown are collecting reports about messages using their domain, fraudulent and legitimate, and may move to a strong DMARC policy after ensuring all their legitimate messages are passing authentication checks.