In today’s digital communication landscape, email remains one of the most essential business channels. Unfortunately, it is also one of the most common attack vectors for phishing. Every day, users receive hundreds of emails, often struggling to distinguish legitimate messages from fraudulent ones.
The solution is the Verified Mark Certificate (VMC) – a new standard in email security and brand visibility that allows your verified company logo to be displayed next to messages in the recipient’s inbox.
What is a VMC?
A Verified Mark Certificate is a digital certificate based on PKI (Public Key Infrastructure) that verifies that the logo shown next to an email genuinely belongs to the sender.
VMC works in conjunction with BIMI (Brand Indicators for Message Identification) – the protocol that enables logos to be displayed in mail clients.
In short:
- BIMI = technical mechanism for logo display,
- VMC = cryptographic trust, ensuring the logo is authentic and tied to the sender’s verified brand.
Requirements for obtaining a VMC
- DMARC in enforcement mode: policy set to p=quarantine or p=reject.
- Registered trademark: the logo must be legally protected by an official trademark authority (EUIPO, USPTO, etc.).
- SVG Tiny PS logo file: compliant with BIMI specifications, secure and script-free.
- Organization validation (OV/EV): the issuer (e.g., DigiCert, Entrust) verifies the business entity, similar to EV SSL validation.
How does VMC work?
- The sender configures a BIMI DNS record pointing to the logo.
- The logo is cryptographically validated against the VMC.
- The receiving mail server checks both BIMI and VMC.
- The verified logo is displayed in the inbox (e.g., Gmail, Apple Mail).
Why choose VMC?
- Increased trust: visible logo builds instant credibility.
- Phishing protection: attackers cannot display a verified logo.
- Higher open rates (CTR): studies confirm higher engagement.
- Professional image: shows your company invests in security.
- Competitive advantage: early adoption gives you an edge.
Who issues VMCs?
Currently, only select global CAs issue VMCs like DigiCert.
A VMC is not just a technical layer but an investment in trust, brand visibility, and customer protection. If your organization meets the requirements, implementing VMC is the next step in building a secure and modern communication strategy.
Do you have any questions about VMC? Do not hesitate to contact our sales department.