DMARC is soon to be a Requirement for PCI Compliance

From April 2025, DMARC will change from being best practice for PCI (Payment Card Industry) compliance to an essential requirement.

As technology continues to evolve, so do the methods of cyberattacks, posing significant threats to organisations, particularly those in the financial sector. And with the majority of people making payments with credit or debit cards, it’s time to take action to make attacks more difficult.

All organisations, including merchants, must implement DMARC for their domains to verify the authenticity of the emails sent on behalf of their brands as part of the new requirements.

By enforcing email authentication standards, The PCI Security Standards Council aims to mitigate the risk of cybercriminals impersonating legitimate organisations to deceive customers into disclosing sensitive information.

What is DMARC and how does it work?

Domain-based Message Authentication Reporting and Conformance (DMARC) is a great tool which stops attackers from spoofing your domain and making their emails look like they come from inside your organisation.

Email is involved in more than 90% of all network attacks and without DMARC, it can be hard to tell if an email is real or fake. Having DMARC allows domain owners to protect their domain(s) from unauthorised use by fighting phishing, spoofing, and Business Email Compromise.

Here is a quick overview of DMARC from our website >

Though the PCI mandate doesn’t come into effect until next year, it’s never too early to begin your DMARC project and start protecting your domains to become compliant with the PCI DMARC mandate.

We highly recommend all businesses implement DMARC whether you need to adhere to the PCI regulations or not.

If you do not have it in place already, it is definitely something to consider for your business especially as the cost is not too prohibitive for this extra layer of protection. The money spent on getting it implemented does not outweigh the benefits of having DMARC in place.

Posted in NewsTagged , ,