~/home / e-mail ranking: banks
E-mail ranking: banks.
Can someone send mail in the name of these domains without it landing in spam? We read SPF, DMARC and MTA-STS of 22 domains from public DNS, as of 6 November 2026.
50% of the domains do not reject forged mail (no DMARC, p=none or p=quarantine).
Grade distribution
| Rank | Domain | Score | SPF | SPF -all | DMARC | Policy | Reports | MTA-STS | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | Acommerzbank.de | 100 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: reject | Reports: yes | MTA-STS: yes | Check live |
| 2 | Abancobpm.it | 90 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: reject | Reports: yes | MTA-STS: no | Check live |
| 3 | Abper.it | 90 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: reject | Reports: yes | MTA-STS: no | Check live |
| 4 | Acomdirect.de | 90 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: reject | Reports: yes | MTA-STS: no | Check live |
| 5 | Adeutsche-bank.de | 90 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: reject | Reports: yes | MTA-STS: no | Check live |
| 6 | Aing.de | 90 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: reject | Reports: yes | MTA-STS: no | Check live |
| 7 | Aintesasanpaolo.com | 90 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: reject | Reports: yes | MTA-STS: no | Check live |
| 8 | Bconsorsbank.de | 83 | SPF: yes | SPF -all: no | DMARC: yes | DMARC policy: reject | Reports: yes | MTA-STS: no | Check live |
| 9 | Bfineco.it | 83 | SPF: yes | SPF -all: no | DMARC: yes | DMARC policy: reject | Reports: yes | MTA-STS: no | Check live |
| 10 | Bn26.com | 83 | SPF: yes | SPF -all: no | DMARC: yes | DMARC policy: reject | Reports: yes | MTA-STS: no | Check live |
| 11 | Bpaypal.com | 83 | SPF: yes | SPF -all: no | DMARC: yes | DMARC policy: reject | Reports: yes | MTA-STS: no | Check live |
| 12 | Bhypovereinsbank.de | 80 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: quarantine | Reports: yes | MTA-STS: no | Check live |
| 13 | Bunicredit.it | 80 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: quarantine | Reports: yes | MTA-STS: no | Check live |
| 14 | Ctargobank.de | 73 | SPF: yes | SPF -all: no | DMARC: yes | DMARC policy: quarantine | Reports: yes | MTA-STS: no | Check live |
| 15 | Cbancaditalia.it | 60 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: none | Reports: yes | MTA-STS: no | Check live |
| 16 | Cdkb.de | 60 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: none | Reports: yes | MTA-STS: no | Check live |
| 17 | Cmps.it | 60 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: none | Reports: yes | MTA-STS: no | Check live |
| 18 | Cpostbank.de | 60 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: none | Reports: yes | MTA-STS: no | Check live |
| 19 | Cposte.it | 60 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: none | Reports: yes | MTA-STS: no | Check live |
| 20 | Csparkasse.de | 55 | SPF: yes | SPF -all: yes | DMARC: yes | DMARC policy: none | Reports: no | MTA-STS: no | Check live |
| 21 | Dmediolanum.com | 35 | SPF: yes | SPF -all: yes | DMARC: no | DMARC policy: – | Reports: no | MTA-STS: no | Check live |
| 22 | Fvolksbank.de | 0 | SPF: no | SPF -all: no | DMARC: no | DMARC policy: – | Reports: no | MTA-STS: no | Check live |
No matches.
And your domain?
Check SPF, DMARC and MX in ten seconds.
Why it matters
Without DMARC at p=reject, scammers can send mail with exactly this sender address and many mailboxes will deliver it. That is how a lot of phishing in the name of banks, parcel services and authorities works. SPF says which servers may send; DMARC tells the receiver what to do with forgeries.
How we measured
Public DNS queries only; nothing is sent to the domains. Points: SPF present 20, SPF with -all 15 (~all 8), DMARC present 20, p=reject 30 (quarantine 20), reports (rua) 5, MTA-STS 10. Grade A from 90, B from 75, C from 55, D from 35, otherwise F. The main domain is measured (the organisational domain for subdomains).
Reading it fairly
DKIM cannot be checked from outside without the selector, so it is left out. p=quarantine is better than nothing but protects less than reject. A low grade does not mean the provider's mail is insecure, only that forgeries get through more easily.