21 June 2026 · 2 min read
BIMI (Brand Indicators for Message Identification) puts your logo in the inbox: in supporting mailbox providers, your brand mark appears in the avatar slot next to messages you send. The appeal is real. A recognisable logo lifts open rates, helps recipients tell your genuine mail from lookalikes, and signals that you take email security seriously. But BIMI is the last step in the authentication stack, not the first, and it only pays off once the foundations underneath it are solid.
The hard prerequisite is DMARC at enforcement. Mailbox providers will not display your logo unless your domain publishes a DMARC record with a policy of p=quarantine or p=reject (some providers require p=reject). If you are still on p=none, BIMI does nothing at all, because the whole point is that the provider trusts you have locked down who can send as your domain. So the honest sequence is: get SPF and DKIM aligned, move DMARC to enforcement without breaking legitimate mail, and only then publish BIMI. That is exactly the journey DMARC Engine automates, taking a domain from p=none to p=reject safely. You can check where you stand today with the free DMARC checker, and confirm SPF and DKIM with the SPF checker and DKIM checker.
The second cost is the VMC (Verified Mark Certificate), and this is where "worth it" gets specific to your brand. Gmail and Apple Mail will only show a logo backed by a VMC: a certificate, issued by an approved authority, that proves you own the trademark on the logo. That means your logo must be a registered trademark in a recognised jurisdiction, and a VMC carries an annual fee (typically several hundred pounds or dollars a year), plus the converted SVG Tiny PS artwork. Some providers honour a CMC (Common Mark Certificate) for logos that are in use but not yet registered, with narrower display support. Without a registered trademark and a VMC, you can still publish a BIMI record, but the major consumer inboxes will not render your logo, which removes most of the visible benefit.
So, is it worth it? BIMI pays off when you send meaningful volume to consumer inboxes (Gmail, Yahoo, Apple Mail), when brand recognition genuinely matters to your open rates and your customers' trust, and when you already hold or can register the trademark on your logo. Retailers, financial services, charities, and any brand that gets impersonated in phishing tend to see the clearest return. BIMI can wait if you are still at p=none, if you send mostly business-to-business mail to providers that do not display logos, if your logo is not trademarkable, or if the VMC cost outweighs the gain at your volume. The good news is that the work to qualify for BIMI, namely reaching DMARC enforcement, is worth doing on its own merits, so nothing is wasted. Start there, validate your setup with the BIMI checker, and treat the logo as the reward at the finish line. For the full picture of where BIMI sits in the stack, see DMARC requirements.