Business Case: Leading Financial Services in Sultanate of Oman

Challenge

Restoring retail and corporate clients’ trust in the bank’s email channel. Allowing marketing emails to reach clients and stopping spoofing attacks.

Solution

Aligning all domains with email relay, SPF, DKIM, MTA-STS TLS-RPT and implementing DMARC email security.

Results

Controlled email flows, better deliverability and spoofing mitigation.

“Today, customers don’t stay silent”, explained Jamal. “If they’ve been a victim of a phishing attack, odds are, they will tell their friends over social media. PowerDMARC helped us restore trust into our email delivery channel and combat phishing attacks with absolute ease.”

Jamal al Khusaibi – Deputy Head of IT
alizz islamic bank

Situation before PowerDMARC

Prior to utilizing PowerDMARC’s services, alizz islamic received numerous complaints from their retail and business clients, indicating that their domains were being spoofed and illegitimate emails were sent on their behalf. Looking to prevent frustration from building up within their diverse customer-base, the team at alizz islamic decided to look into a reliable, long term solution that would effectively combat this issue. This ultimately led them to PowerDMARC.

Identifying the problem

After communicating the initial problem, we narrowed down the main challenges faced by alizz islamic to:

  • Difficulty in managing multiple domain names
  • Lack of visibility on sending sources
  • Spoofing and phishing attacks on retail and corporate online banking users
  • Marketing emails delivered to the junk folder
  • High volume mails for e-statements
report ip abuse powerdmarc
unqiue features to protect your organisation powerdmarc

We then explained how these issues can be mitigated via DMARC and outlined the necessary steps needed to achieve full DMARC enforcement, namely:

  • Gaining insight into all email channels
  • Authenticating all emails with DKIM
  • Aligning email deliverability for marketing channels
  • Mitigating the effect of phishing, spoofing, business email compromise

This involved working hand in hand with the IT team in alizz islamic to publish and update the necessary SPF, DKIM and DMARC records and gradually working up to a 100% p = reject DMARC policy.