Research

TIKAJ Research

Original data on how well organisations defend their brand and their customers against impersonation. We collect it ourselves from public sources, publish the method alongside the numbers, and report aggregates rather than naming individual organisations.

Each study states the date its data was collected. Figures describe that day and are not updated afterwards.

Published studies

Banking, insurance and NBFCs · Published 2026-10-05
Can Attackers Send Email as Your Bank? Email Spoofing Defences at Indian Banks and Insurers, 2026
We read the DMARC, SPF, MTA-STS and BIMI records of Indian banks, insurers and upper-layer NBFCs from public DNS on 2026-10-04. All 45 domestic commercial banks enforce DMARC on their main domain, but 8 of their 49 .bank.in domains have no DMARC record at all. Aggregates only: no institution is named.
Read the study

Journalists and researchers can ask about the data at hello@tikaj.com.

TIKAJ Research

Published studies

Can Attackers Send Email as Your Bank? Email Spoofing Defences at Indian Banks and Insurers, 2026