Best practices, Dobre praktyki, Maile transakcyjne, Transactional Emails
Best practices, Dobre praktyki, Maile transakcyjne, Transactional Emails
mBank was the first bank in our country to declare war on cybercriminals’ activities and implement sender authentication in the most popular mailboxes used by their customers.
These solutions help visually distinguish genuine from forged correspondence. Both Polish (including Interia, Onet, WP/O2) and global (including Gmail) mail providers enable advanced sender authentication solutions.
Having these verified email address badges, which are visible in most popular email clients, means the message has been digitally signed using a certain security protocol, called S/MIME to be more precise.
Their proper implementation is rewarded by displaying distinctive graphics (a green shield), or the brand’s logo, next to the sender’s name in the mailbox and inside each authenticated email. This type of verification also has an impact on the brand’s reputation and message deliverability, preventing emails from ending up in spam.
” The additional security implemented by mBank as part of the fight against phishing allows message recipients to verify whether the email actually comes from this particular bank. Added safeguard, which appears in the form of graphics, is certainly a great convenience for ordinary users, thanks to which they can more easily distinguish a malicious message from a legitimate one. One should keep in mind, however, that every security measure will sooner or later be broken/dominated by cybercriminals, which is why it’s so important to constantly improve our systems and make sure they have the ‘latest’ safety features.”
Michał Błaszczak, Pentester at EmailLabs
CyberLabs #1- Phishing being one of the most popular cyber threats
The mBank Group is using Emailabs to handle transaction emails sent to users of Paynow payment gateway. The CTO of mElements (From the mBank Group) shared his comments on the changes brought by the implementation of Email API:
“We chose Emailabs, i.a. due to our customers’ data security,” Sebastian Sztajnert said at the time.
Today mBank goes further by launching the latest available sender authentication solutions. Characters or graphic elements allow users to easily verify the validity of communications received in most popular mobile applications or browser versions (they will not be available for Thunderbird or Outlook users).
How did we achieve the highest level of security for data storage servers? Read mElement and EmailLabs’ Case Study.
Mailbox providers require senders to have basic authentication like SPF and DKIM, without which messages will not reach users. However, besides the general solutions available to all, senders are offered access to premium features.
In the first step, sender checks ISPs’ structure in his contact list. If the vast majority of them use: WP, O2, Interia, Onet, Gmail, Yahoo, in each case these providers’ mailboxes can be configured for additional sender security.
Have you noticed that next to some email senders on your inbox you can see the badge of a verified email address?
Maximize your email deliverability and security with EmailLabs!
WP, O2 have a Trusted Sender standard, Onet has a Verified Sender service, Interia gives you the option to run a Safe Sender and have the logo appear in your inbox.
You’ll see a green padlock icon and a notification in the message from the Safe Sender.
Gmail as well as Yahoo, and also Onet Mail recently, while by honoring the BIMI solution, with verified senders they display both on the mail listing and in the emails itself, notarized brand logos.
mBank communication secured by the BIMI standard.
The mailbox providers are responsible for the sender’s technical authentication settings. By verifying their email communication activities, they have the right to reject enabling the service if these practices raise any concerns. Most additional solutions also come at an extra cost and require a series of steps. To facilitate these steps, you can use EmailLabs – all of them are available in a single agreement.
Maximize your email deliverability and security with EmailLabs!
Authenticated senders like Verified Sender, Safe Sender, BIMI or S/MIME are proven solutions for the most recognizable brands, especially those operating in the banking, fintech, courier services, e-commerce, retail or advertising industries.
COO EmailLabs
Graduate of the University of Economics in Poznan. Since 2010, she has been actively involved in new technologies and the IT industry. At Vercom S.A., the CPaaS market leader in this part of Europe, she manages the EmailLabs service. Privately, she is interested in behavioral economics and news from IT and cyber-security.
See more articles
Gmail has announced significant changes in the requirements for email senders to maintain a good reputation and proper classification of messages in user inboxes starting from February 1, 2024....
Vercom S.A. public joint-stock company to which the EmailLabs project belongs, has been assessed and certified to be compliant with the ISO/IEC 27001 and ISO/IEC 27018 standards. The Vercoms’...
The increasing number of phishing attacks each year, and the projection that this trend will continue to escalate, aren’t likely to astonish anyone. This can be attributed, in part,...
Out of all the things that can go wrong when sending out marketing emails, having your emails end up in the recipient’s spam folder is arguably the most dreaded...
Email Authentication, Security
DMARC is an email authentication protocol that is designed to give domain owners the ability to protect their domain from unauthorized use, commonly known as email spoofing. Spoofing occurs...
With the emergence of the Covid-19 pandemic, many brands have been challenged to adapt in a short period to the changed reality and new consumer attitudes. That meant reorganizing...
What is the darknet? Shrouded in mystery for many years and often associated with ominous connotations, the darknet is a part of the internet that evokes curiosity, fascination, and...
A few weeks ago, at Vercom, we began the process of implementing the NIS2 Directive and preparing to meet the requirements of the Digital Operational Resilience Act (DORA). What...
If you’ve been following our updates, you’re likely aware of the recent changes in email sender requirements introduced by major global providers like Gmail and Yahoo. As of February...
What is the darknet? Shrouded in mystery for many years and often associated with ominous connotations, the darknet is a part of the internet that evokes curiosity, fascination, and...
A few weeks ago, at Vercom, we began the process of implementing the NIS2 Directive and preparing to meet the requirements of the Digital Operational Resilience Act (DORA). What...
If you’ve been following our updates, you’re likely aware of the recent changes in email sender requirements introduced by major global providers like Gmail and Yahoo. As of February...
Have you ever sent an email in haste and immediately wished you hadn’t? It happens more often than we’d like to admit. If you ever find yourself in this...
One safe and easy way to keep track of your digital interactions is to save emails as PDFs. However, do you know the best ways to easily turn your emails into PDF files? In this article, we’ll look into the different ways you can do to turn your emails into accessible PDF files. Let’s start! Key Takeaways To save emails...
Sending large files online can sometimes feel like maneuvering through a maze with unexpected twists and turns. The frustration of hitting attachment size limits or dealing with slow uploads...
Are you a bit baffled by email protocols like IMAP, POP3, and SMTP? Have no fear – this article is here to explain it all. If you have ever...
In 2024, global providers like Gmail and Yahoo have implemented a series of changes, primarily targeting bulk senders. These changes, already in effect, are part of a continuous update...
In the face of dynamic technological advancements and increasingly sophisticated cyber threats, ensuring network security has become crucial. Dozen security incidents present a challenge that we cannot afford to...