According to a recent decision taken by the National Cyber Security Centre (NCSC), significant changes are expected to apply to the Mail Check service. These changes include the discontinuation of their DMARC reporting service, which will take effect on 24 March 2025. The changes will significantly impact UK public sector organizations’ email security practices.

NCSC Mail Check Updates Explained

As the NCSC strives to expand its offerings to all UK-based organizations without compromising the cost and complexity level of the existing service, it has introduced a series of changes to facilitate the process.

What Is Changing?

According to the NCSC, the Mail Check will continue providing checks for the following services:

– The policy strength and errors of DMARC policy

– The effectiveness and errors in SPF policy

– The policy strength and errors of the MTA-STS policy

– Relevant inbound TLS details such as encryption ciphers, validity of certificates, etc.

However, the NCSC has confirmed that the service will discontinue support for:

– DMARC aggregate reporting

– DMARC insights

– DKIM checks

– TLS reporting (TLS-RPT)

Implications of These Changes

Letting go of DMARC aggregate reporting will make it more difficult to identify and respond to email-based threats, increasing the likelihood of successful phishing attacks. Adhering to local and international email security recommendations and regulations will also become more challenging.

For example, the Cyber Assessment Framework (CAF) requires the implementation of effective tools and mechanisms for cyberattack detection to reduce the likelihood and intensity of cyber attacks, and DMARC aggregate reporting was one such effective measure. Thus, letting go of DMARC aggregate reporting will not only complicate the detection of unauthorized use but also negatively impact an organization’s compliance with the relevant regulations.

DMARC requires continuous monitoring and updates to stay effective and to adjust to new types of security threats. DMARC aggregate reporting was an integral aspect of this process, and sacrificing it may jeopardize email delivery.

Importance of DMARC Monitoring for UK Public Sector Organizations

Email security is a pressing concern for UK public sector organizations, given their role in managing sensitive citizen data and delivering critical public services. DMARC (Domain-based Message Authentication, Reporting, and Conformance) monitoring is pivotal to this cause.

1. Protecting Public Trust

Public sector organizations are frequent targets for cybercriminals attempting to exploit the trust of citizens. DMARC monitoring helps safeguard public sector domains against forgery and exploitation.

2. Preventing Phishing and Spoofing Attacks

Without DMARC enforcement, attackers can impersonate public sector email domains, leading to phishing attacks that steal personal or financial information. Monitoring ensures the enforcement of DMARC policies can be achieved successfully.

4. Proactive Threat Identification

DMARC reports provide detailed insights into who is sending emails on behalf of your domain. This visibility helps identify malicious activities early, allowing for timely interventions.

5. Cost-Efficiency in Security Measures

Implementing DMARC monitoring can reduce the financial and reputational costs associated with email-based attacks. It also reduces the workload on IT teams by automating domain protection.

Mail Check Alternatives: Why Organizations Need Additional DMARC Solutions

To avoid the adverse effects of the expected Mail Check changes, NCSC recommends that UK public sector organizations opt for alternative or additional DMARC solutions like PowerDMARC. These should offer relevant functionalities such as:

DMARC aggregate (RUA) and forensic (RUF) reporting
Alerts for potential threats (for which constant monitoring is required)
Advanced analytics feature
DKIM checks
TLS reporting

How PowerDMARC Can Help Comply with the New Rules

Functionality	NCSC Mail Check After the March 2025 Changes	PowerDMARC
DMARC Aggregate Reporting (RUA)	No	Yes
DMARC Forensic Reporting (RUF)	No	Yes
DKIM Checks	No	Yes
TLS Reporting	No	Yes
Real-time Monitoring & Alerts	Limited	Custom email, and webhook alerts
Advanced Analysis Tools	No	Yes

PowerDMARC is the Mail Check alternative you need to help you comply with the changes and new regulations. Our platform offers:

Both DMARC Aggregate (RUA) and Forensic (RUF) reporting
Compliance with Google, Yahoo, PCI-DSS, and other relevant email authentication requirements, be they local or global
Simplified DMARC reporting, where we transform raw XML files into human-readable formats and can be exported as custom PDF reports.
Easy filtering and helpful visualizations of sending sources
Real-time alerts (you can choose to customize email alerts based on your preferences)
Multilingual support (in over 11 languages!)
Multi-layered approach with multi-protocol support encompassing SPF, DKIM, and numerous other protocols
A team that will always be at your disposal to provide you instantaneous answers to all your questions.

About
Latest Posts

Ahona Rudra

Domain & Email Security Expert at PowerDMARC

Ahona is the Marketing Manager at PowerDMARC, with 5+ years of experience in writing about cybersecurity topics, specializing in domain and email security. Ahona holds a post-graduation degree in Journalism and Communications, solidifying her career in the security sector since 2019.

NCSC Mail Check Changes & Their Impact on UK Public Sector Email Security