News & analysis
Accountancy email security in 2026: nearly there, not quite
Every UK accountancy firm we checked has a DMARC record - the best adoption of any sector - but 1 in 8 left it switched off at p=none, and is spoofable as a result.
News & analysis
Law firm email security in 2026: the 1 in 10 still exposed
UK law firms are among the best-protected sectors for email - yet 1 in 10 can still be spoofed, in the sector where email payment fraud is the single most common cyberattack.
News & analysis
Financial services email security in 2026: best-protected, but not done
UK financial services lead every sector on DMARC enforcement and verified-logo BIMI - yet only 12% enforce inbound encryption, and 1 in 10 can still be spoofed.
News & analysis
Charity email security in 2026: stuck at the starting line
UK charities are the sector most likely to set up DMARC and then stall at p=none - leaving 25-29% spoofable despite having 'done it'. The findings and the fix.
News & analysis
NHS and healthcare email security in 2026
Healthcare is the UK's most impersonable sector - and NHS trusts are more exposed than private hospitals. 52% of NHS trust domains can be spoofed. What it means and what to do.
News & analysis
The UK Email Impersonation Report 2026
We checked 198 major UK organisations and found around 1 in 5 can still be spoofed by email. The sector-by-sector findings.
News & analysis
NCSC Mail Check migration guide: what to do now it's gone
NCSC Mail Check retired on 31 March 2026. A step-by-step guide to migrating your DMARC and TLS reporting to a replacement, without overpaying.
