Defaults.Exposed › DMARC › DMARC maturity by country: the league table
DMARC maturity by country: the league table
Data as of 2026-06-29 · Edition #1 · data as of 2026-06-29
Netherlands leads the world on DMARC maturity: its national domain ending (.nl) scores 44.8 out of 100, with 29.4% of evaluated domains enforcing DMARC. 68 countries qualify for the league; the census-wide score is 17.7.
The leaders: Netherlands (.nl, 44.8) · Switzerland (.ch, 39.9) · Kenya (.ke, 37.5) · Poland (.pl, 36.6) · Norway (.no, 33.4). Two shapes of population reach the top of this table: countries where enforcement is genuinely common, and countries where records are widely published but much of the population has not yet enforced — the score gives a published-but-unenforced record half the credit of an enforcing one. Read the Enforcing column alongside the score before crowning anyone.
The laggards: Philippines (.ph, 0.4) · China (.cn, 1.9) · South Korea (.kr, 4) · Vietnam (.vn, 6.8) · Russia (.ru, 6.9). In each, most domains publish no DMARC record at all, so the visible "From" address of a typical domain can simply be forged.
"Country" here means the national domain ending (ccTLD) — .nl, .de, .fr — not where a company is headquartered. A ccTLD is a strong proxy for a national domain population, but it is a proxy, and we state it as one. It is also a registration proxy: some endings attract heavy bulk or overseas registration, so a ccTLD's population is everything registered under the ending — not a roster of that country's businesses.
Maturity Score = progress toward enforcement on a true 0–100 scale: 0 = no domain publishes a record, 100 = every domain enforces, and a published-but-unenforced record earns half-credit. "Enforcing" = p=quarantine or p=reject.
| # | Country | Maturity Score | Enforcing |
|---|---|---|---|
| 1 | Netherlands (.nl) | 44.8 | 29.4% |
| 2 | Switzerland (.ch) | 39.9 | 32.9% |
| 3 | Kenya (.ke) | 37.5 | 21.7% |
| 4 | Poland (.pl) | 36.6 | 23.4% |
| 5 | Norway (.no) | 33.4 | 21.9% |
| 6 | Croatia (.hr) | 31.9 | 10.7% |
| 7 | Germany (.de) | 31.8 | 21.4% |
| 8 | Greece (.gr) | 31.1 | 18.3% |
| 9 | Spain (.es) | 30.9 | 15% |
| 10 | Portugal (.pt) | 29.7 | 13.2% |
| 11 | Nigeria (.ng) | 29.5 | 12.3% |
| 12 | Romania (.ro) | 28.5 | 10.8% |
| 13 | India (.in) | 28.1 | 19.3% |
| 14 | Singapore (.sg) | 27.9 | 17.2% |
| 15 | Argentina (.ar) | 27.7 | 6.3% |
| 16 | Turkey (.tr) | 27.4 | 15.9% |
| 17 | Italy (.it) | 27.3 | 5.2% |
| 18 | Luxembourg (.lu) | 27 | 18.5% |
| 19 | France (.fr) | 26.8 | 13.7% |
| 20 | Belgium (.be) | 26.6 | 14.9% |
| 21 | Denmark (.dk) | 26.6 | 19.9% |
| 22 | Chile (.cl) | 26.5 | 9.1% |
| 23 | Peru (.pe) | 26.4 | 11.8% |
| 24 | Slovakia (.sk) | 26.4 | 16.7% |
| 25 | Colombia (.co) | 26.3 | 18.5% |
| 26 | Austria (.at) | 26.1 | 11.1% |
| 27 | Slovenia (.si) | 25.7 | 6.8% |
| 28 | Thailand (.th) | 25.6 | 16.8% |
| 29 | South Africa (.za) | 25.4 | 15.7% |
| 30 | United Arab Emirates (.ae) | 25.2 | 8.8% |
| 31 | Saudi Arabia (.sa) | 25.2 | 10.8% |
| 32 | Mexico (.mx) | 25.1 | 13% |
| 33 | Estonia (.ee) | 24.6 | 12.4% |
| 34 | Brazil (.br) | 23.2 | 11.3% |
| 35 | Hungary (.hu) | 23.1 | 6.9% |
| 36 | United Kingdom (.uk) | 23.1 | 13.4% |
| 37 | Australia (.au) | 22.8 | 13.7% |
| 38 | Morocco (.ma) | 22.7 | 5.7% |
| 39 | New Zealand (.nz) | 22.4 | 11.5% |
| 40 | Bulgaria (.bg) | 22.2 | 9.2% |
| 41 | Pakistan (.pk) | 22.2 | 5.3% |
| 42 | Indonesia (.id) | 21.7 | 10.3% |
| 43 | Uzbekistan (.uz) | 21.6 | 5.8% |
| 44 | Canada (.ca) | 20.6 | 12.5% |
| 45 | Ireland (.ie) | 20.6 | 8.8% |
| 46 | Japan (.jp) | 19.5 | 5.9% |
| 47 | Lithuania (.lt) | 19.4 | 5.9% |
| 48 | Latvia (.lv) | 19.1 | 11.2% |
| 49 | Serbia (.rs) | 19.1 | 6.5% |
| 50 | Hong Kong (.hk) | 18.9 | 9% |
| 51 | Czechia (.cz) | 17.9 | 9.2% |
| 52 | Israel (.il) | 17.6 | 5.2% |
| 53 | Sweden (.se) | 16.9 | 10.2% |
| 54 | Finland (.fi) | 16.3 | 7.3% |
| 55 | Montenegro (.me) | 15.5 | 10.7% |
| 56 | Taiwan (.tw) | 15.4 | 8.8% |
| 57 | Iran (.ir) | 15 | 4.7% |
| 58 | Malaysia (.my) | 13.7 | 7.8% |
| 59 | United States (.us) | 13.7 | 8.7% |
| 60 | Nepal (.np) | 13.4 | 4% |
| 61 | Belarus (.by) | 11.5 | 6.3% |
| 62 | Kazakhstan (.kz) | 10.1 | 7% |
| 63 | Ukraine (.ua) | 9.9 | 4.6% |
| 64 | Russia (.ru) | 6.9 | 3.2% |
| 65 | Vietnam (.vn) | 6.8 | 4% |
| 66 | South Korea (.kr) | 4 | 1.9% |
| 67 | China (.cn) | 1.9 | 1.5% |
| 68 | Philippines (.ph) | 0.4 | 0.2% |
Frequently asked questions
What does "country" mean in this table?
The national domain ending (ccTLD): .nl stands for the Netherlands, .de for Germany, and so on. The table measures the domain population registered under each ending, not where companies are headquartered — a strong proxy for national practice, stated as a proxy.
What is the DMARC Maturity Score?
A 0–100 index of how far a country's domain population has progressed toward enforced DMARC: domains with no record score 0, published-but-unenforced records earn half-credit, and 100 would mean every domain enforces. The census-wide score is 17.7 as of 2026-06-29; the formula is published on the by-TLD league page and in the DAMMM methodology. A population can outscore another on published-but-unenforced records alone; read the Enforcing column alongside the score.
Why is a country missing, and how often does the table update?
Only ccTLDs with at least 50,000 evaluated domains at the baseline edition qualify, and membership is frozen there so month-on-month movement is real movement. The table refreshes monthly with the census; edition #1 (2026-06) is the baseline.
Want to know where your domain stands? Run the free check → — private; we only ever show a domain's grade to its verified owner.
DMARC hub · By TLD · DAMMM monthly report · The 6-stage model
How we grade → · Aggregate data only; we never publish an individual domain's grade.