sumup.com email security: SPF, DKIM & DMARC

Is sumup.com spoofable? See sumup.com's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.

Last updated: June 3, 2026

90A
This domain is protected against spoofing

SPF

OK
v=spf1 ip4:52.211.74.234 ip4:52.214.148.172 include:_spf.google.com include:_spf.salesforce.com include:sendgrid.net include:amazonses.com include:_spf.iriscrm.com -all

DKIM

OK
Selectors: google, mandrill, s1, s2

DMARC

OK
v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@sumup.com; ruf=mailto:dmarc@sumup.com

MX

OK
aspmx.l.google.com, alt2.aspmx.l.google.com, alt1.aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com

MTA-STS

Missing

No record found

Read the guide

Recommendations

  1. 1Add MTA-STS to enforce TLS encryption for incoming emails

    Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.

Run a live analysis

The results above are updated daily. For an instant check of sumup.com, run a live analysis.

Analyze sumup.com live

Frequently asked questions about sumup.com

Is sumup.com spoofable?

No. sumup.com is protected against email spoofing with a robust configuration. Email security score: 90/100 (grade A).

Does sumup.com have an SPF record?

Yes, sumup.com publishes an SPF record (-all qualifier).

What is sumup.com's DMARC record?

sumup.com publishes a DMARC record (_dmarc.sumup.com) with a p=reject policy.

Does sumup.com use DKIM?

Yes, DKIM signatures were detected for sumup.com.

Want to test another domain? Run a free email spoofing test.

Guides to understand these results

Check other domains