🖼️

BIMI Checker

Brand Indicators for Message Identification (BIMI) allows you to display a corporate logo next to your messages in the inbox.

RECORD TYPE: TXT
FORMAT: SVG Tiny PS
REQUIREMENT: Strict DMARC Policy (p=quarantine or p=reject)

What is BIMI Checker?

BIMI is a standard that rewards organizations for deploying strong DMARC policies by surfacing their official logo directly inside supported email clients (like Gmail, Yahoo, and Apple Mail).

How it Works

The brand publishes a DNS TXT record at `default._bimi.domain.com` pointing to a highly-specific, secure SVG file of their logo. When an email arrives, the provider verifies DMARC passes, reads the BIMI record, and renders the logo in the UI.

Key Use Cases

Increasing brand visibility and trust immediately within the user's inbox.

Visually distinguishing legitimate emails from phishing attempts.

Incentivizing the security team to enforce DMARC at p=reject.

Advanced Details

To use BIMI in major clients like Gmail, the SVG must often be verified by an expensive Verified Mark Certificate (VMC) issued by a recognized CA, proving trademark ownership.

Cybersecurity Pros & Cons

Security Advantages
  • Displays verified brand logo in inbox — users can visually distinguish legitimate emails from spoofed phishing attempts.
  • BIMI requires DMARC p=quarantine or p=reject as a prerequisite, forcing organisations to achieve strong email security posture.
  • Verified Mark Certificates (VMC) link domain identity to a legal trademark, providing stronger sender verification than DNS alone.
  • Reduces phishing success rates by making brand impersonation visually obvious to end users.
Security Limitations
  • BIMI only works in supported clients (Gmail, Yahoo, Apple Mail) — Outlook and many corporate mail clients still ignore it.
  • A compromised DNS zone allows an attacker to replace the BIMI SVG URL with a malicious logo to abuse recipient trust.
  • Obtaining a Verified Mark Certificate (VMC) is expensive and time-consuming, creating a barrier for smaller organisations.
  • BIMI does not protect against attacks using entirely different domains (e.g., brand-support.com) that lack the legitimate logo.
Ready to Test?

Use our professional-grade tool to perform a real-time check for this module.

Run Module Now
Related Docs