The Spark Team
Smart. Focused. Email.
Fast, cross-platform email designed to filter out the noise - so you can focus on what's important.
Definition
💡BIMI: short for Brand Indicators for Message Identification, the standard that lets your company's logo show up next to your name in someone's inbox, but only once you've proven, through DMARC, DKIM, and SPF, that the email actually came from you.
Why should you care about BIMI
If you open your inbox right now and glance at the sender logos next to a few emails, you'll see that some show a company logo. Most show a plain gray circle with initials. What's the difference?
A recognizable logo next to a sender's name works the same way a familiar face does. It's a shortcut for "I know this one is real," and in an inbox full of look-alike addresses, that shortcut matters. Google's own announcement of BIMI in Gmail and Workspace put it plainly: BIMI exists to build "increased confidence in the source of emails" while pushing the wider email industry toward stronger sender authentication.
BIMI isn't a security feature by itself. It's a reward system. You don't get a logo in the inbox just by asking. You get it by having DMARC enforced at quarantine or reject, meaning your domain is already actively blocking spoofed mail. BIMI just makes that work visible.
That trust shortcut is still rare, though. A 2025 review of 13,000 real sender domains found that "a significant majority (90.85 percent) had no BIMI record, while only 4.57 percent had a valid BIMI record, and 4.58 percent had an invalid BIMI record," according to Validity's analysis of BIMI adoption. Put plainly: fewer than one company in twenty has actually gotten this working. That's not a reason to skip it, a working logo stands out precisely because so few companies have one, but it does mean BIMI is still a genuine edge right now, not something every recipient already expects to see.
How BIMI works
You've got two tiers:
Standard BIMI gets your logo showing once your DMARC, DKIM, and SPF records check out and your logo file meets spec. No extra certificate required. Yahoo Mail and AOL will display it on this basis alone, though actual visibility still depends partly on sender reputation.
VMC-certified BIMI adds a Verified Mark Certificate, essentially a document that proves you legally own the trademark on your logo. This is what earns you Gmail's blue verified checkmark next to your name. Apple Mail accepts either a VMC or an equivalent proof of ownership, as long as you're on a reasonably recent version of the app.
Support isn't universal, and that's worth knowing before you invest the effort. Gmail, Yahoo, AOL, Apple Mail, and Fastmail all render BIMI logos today. But Outlook, Outlook.com, and Microsoft 365 currently don't display standard BIMI logos for regular inbound mail. Worth the setup if half your recipients are on Outlook? Maybe not yet, but between the gaps in Outlook support and how few companies have set this up correctly so far, you're not exactly late to the party either.
BIMI best practices
Don't chase BIMI before DMARC is solid. It's built on top of authentication, not a replacement for it. Skipping that order just means a logo that never actually renders.
Budget for the certificate if the checkmark matters to you. VMCs aren't free, and pricing varies by provider. That's the tradeoff for the more visible badge.
Check rendering across providers, not just Gmail. A logo that looks great in Yahoo won't appear at all for your Outlook recipients right now.
Keep your logo file current. If your branding changes, your BIMI setup needs updating too, or you'll end up showing an outdated mark.
Set realistic expectations internally. With well under five percent of domains getting this right today, a working logo in the inbox is still a genuine differentiator, not yet routine housekeeping the way SPF or DKIM has become.
Treat BIMI as trust signaling, not protection. It makes legitimate mail easier to recognize. DMARC is still what's actually blocking the fakes.
Related terms