Defaults.Exposed › DMARC › DMARC maturity by country: the league table
DMARC maturity by country: the league table
Data as of 2026-07-28 · Edition #2 · data as of 2026-07-28
Netherlands leads the world on DMARC maturity: its national domain ending (.nl) scores 44.6 out of 100, with 29.6% of evaluated domains enforcing DMARC. 68 countries qualify for the league; the census-wide score is 18.8.
The leaders: Netherlands (.nl, 44.6) · Poland (.pl, 41.2) · Switzerland (.ch, 40.1) · Kenya (.ke, 37.8) · Croatia (.hr, 32.9). Two shapes of population reach the top of this table: countries where enforcement is genuinely common, and countries where records are widely published but much of the population has not yet enforced — the score gives a published-but-unenforced record half the credit of an enforcing one. Read the Enforcing column alongside the score before crowning anyone.
The laggards: China (.cn, 1.9) · South Korea (.kr, 4) · Vietnam (.vn, 7) · Russia (.ru, 7) · Kazakhstan (.kz, 10.1). In each, most domains publish no DMARC record at all, so the visible "From" address of a typical domain can simply be forged.
"Country" here means the national domain ending (ccTLD) — .nl, .de, .fr — not where a company is headquartered. A ccTLD is a strong proxy for a national domain population, but it is a proxy, and we state it as one. It is also a registration proxy: some endings attract heavy bulk or overseas registration, so a ccTLD's population is everything registered under the ending — not a roster of that country's businesses.
Maturity Score = progress toward enforcement on a true 0–100 scale: 0 = no domain publishes a record, 100 = every domain enforces, and a published-but-unenforced record earns half-credit. "Enforcing" = p=quarantine or p=reject.
Country
| # | Country | Maturity Score | Enforcing |
|---|---|---|---|
| 1 | Netherlands (.nl) | 44.6 | 29.6% |
| 2 | Poland (.pl) | 41.2 | 28.8% |
| 3 | Switzerland (.ch) | 40.1 | 33.2% |
| 4 | Kenya (.ke) | 37.8 | 21.4% |
| 5 | Croatia (.hr) | 32.9 | 10.6% |
| 6 | Germany (.de) | 32.7 | 21.9% |
| 7 | Greece (.gr) | 31.9 | 17.9% |
| 8 | Norway (.no) | 30.7 | 20% |
| 9 | Nigeria (.ng) | 30.4 | 12.9% |
| 10 | India (.in) | 30.2 | 22.3% |
| 11 | Spain (.es) | 30.1 | 14.8% |
| 12 | Portugal (.pt) | 30.1 | 13.4% |
| 13 | Argentina (.ar) | 29.3 | 6.1% |
| 14 | Romania (.ro) | 28.9 | 11% |
| 15 | Italy (.it) | 28.4 | 5% |
| 16 | Singapore (.sg) | 28.2 | 17.3% |
| 17 | Slovakia (.sk) | 27.9 | 18.3% |
| 18 | Turkey (.tr) | 27.9 | 16.3% |
| 19 | France (.fr) | 27.7 | 13.5% |
| 20 | Peru (.pe) | 27.1 | 12.2% |
| 21 | Luxembourg (.lu) | 27 | 18.5% |
| 22 | Chile (.cl) | 26.9 | 9.4% |
| 23 | Belgium (.be) | 26.7 | 14.9% |
| 24 | Thailand (.th) | 26.3 | 17.4% |
| 25 | Denmark (.dk) | 26.1 | 19.6% |
| 26 | Saudi Arabia (.sa) | 26.1 | 11% |
| 27 | Mexico (.mx) | 26 | 14.1% |
| 28 | Colombia (.co) | 25.8 | 19.3% |
| 29 | Slovenia (.si) | 25.7 | 7% |
| 30 | Austria (.at) | 25.6 | 11.1% |
| 31 | United Arab Emirates (.ae) | 25.5 | 8.9% |
| 32 | Pakistan (.pk) | 25.3 | 6.1% |
| 33 | South Africa (.za) | 25.3 | 15.4% |
| 34 | Brazil (.br) | 24.3 | 11.2% |
| 35 | United Kingdom (.uk) | 23.7 | 14.8% |
| 36 | Australia (.au) | 23.2 | 14.6% |
| 37 | Morocco (.ma) | 23 | 5.6% |
| 38 | Bulgaria (.bg) | 22.9 | 9.4% |
| 39 | New Zealand (.nz) | 22.2 | 11.3% |
| 40 | Uzbekistan (.uz) | 22.1 | 6% |
| 41 | Indonesia (.id) | 21.9 | 10.3% |
| 42 | Estonia (.ee) | 21.7 | 11% |
| 43 | Hungary (.hu) | 20.9 | 6% |
| 44 | Canada (.ca) | 20.7 | 13.6% |
| 45 | Ireland (.ie) | 20.1 | 8.7% |
| 46 | Japan (.jp) | 19.6 | 5.9% |
| 47 | Lithuania (.lt) | 19.5 | 6% |
| 48 | Hong Kong (.hk) | 19 | 9.1% |
| 49 | Latvia (.lv) | 18.9 | 11.1% |
| 50 | Serbia (.rs) | 18.3 | 6.2% |
| 51 | Czechia (.cz) | 17.9 | 9.3% |
| 52 | Israel (.il) | 16.8 | 5% |
| 53 | Montenegro (.me) | 16.6 | 11.6% |
| 54 | Iran (.ir) | 16.2 | 5.1% |
| 55 | Finland (.fi) | 16.1 | 7.2% |
| 56 | Taiwan (.tw) | 15.5 | 9.2% |
| 57 | United States (.us) | 15.5 | 11.1% |
| 58 | Sweden (.se) | 14.4 | 8.5% |
| 59 | Malaysia (.my) | 13.9 | 7.8% |
| 60 | Nepal (.np) | 13.8 | 4.5% |
| 61 | Philippines (.ph) | 13.8 | 9.2% |
| 62 | Belarus (.by) | 11.1 | 6% |
| 63 | Ukraine (.ua) | 10.2 | 4.7% |
| 64 | Kazakhstan (.kz) | 10.1 | 6.9% |
| 65 | Russia (.ru) | 7 | 3.1% |
| 66 | Vietnam (.vn) | 7 | 4.1% |
| 67 | South Korea (.kr) | 4 | 1.8% |
| 68 | China (.cn) | 1.9 | 1.5% |
Frequently asked questions
What does "country" mean in this table?
The national domain ending (ccTLD): .nl stands for the Netherlands, .de for Germany, and so on. The table measures the domain population registered under each ending, not where companies are headquartered — a strong proxy for national practice, stated as a proxy.
What is the DMARC Maturity Score?
A 0–100 index of how far a country's domain population has progressed toward enforced DMARC: domains with no record score 0, published-but-unenforced records earn half-credit, and 100 would mean every domain enforces. The census-wide score is 18.8 as of 2026-07-28; the formula is published on the by-TLD league page and in the DAMMM methodology. A population can outscore another on published-but-unenforced records alone; read the Enforcing column alongside the score.
Why is a country missing, and how often does the table update?
Only ccTLDs with at least 50,000 evaluated domains at the baseline edition qualify, and membership is frozen there so month-on-month movement is real movement. The table refreshes monthly with the census; edition #2 (2026-07) is the baseline.
Want to know where your domain stands? Run the free check → — private; we only ever show a domain's grade to its verified owner.
DMARC hub · By TLD · DAMMM monthly report · The 6-stage model
How we grade → · Aggregate data only; we never publish an individual domain's grade.