Join our Newsletter — 33% off our NHI Course

Could phishing and spoofing turn Brand Trust into revenue loss?

 

(@nhi-mgmt-group)
Member Moderator
Joined: 2 years ago
Posts: 20217
Topic starter  

TL;DR: Brand trust now depends on whether customers can authenticate an organisation's messages, with phishing, spoofed domains, and data exposure turning security failures into reputation risk, according to GlobalSign. Email identity, certificate hygiene, and data handling now need shared oversight if trust is to survive attacks.

Editorial analysis by NHI Mgmt Group, based on content published by GlobalSign: “La confianza en la marca comienza con la seguridad: 5 consejos que todo especialista en marketing debe conocer”.

By the numbers:

  • 71% of consumers say they would stop doing business with a company after a data breach.
  • 90% of successful cyberattacks start with a phishing email, according to Verizon.

Key questions

Q: Why does customer-data handling affect brand trust so directly?

A: Because customers judge trust by both the message and the consequences of a mistake.

Q: What signs show that email identity controls are not keeping pace?

A: Watch for stale shared mailboxes, persistent delegated send permissions, accounts that remain active after role change, and alerts that show unusual sending behaviour from trusted identities.

Q: How should organisations protect brand trust in email communications?

A: Organisations should treat email as an identity channel and enforce authentication controls such as DMARC, SPF, and DKIM.

Practitioner guidance

  • Enforce domain authentication across all sending channels Deploy DMARC, SPF, and DKIM across every customer-facing domain and ensure policy alignment for marketing, transactional, and third-party senders.
  • Use verified branding for high-trust mail Adopt Verified Mark Certificates where supported so recipients can more easily distinguish legitimate brand mail from spoofed messages.
  • Minimise customer data in campaigns Review every form, landing page, and nurture workflow to remove fields that are not required for the campaign outcome and to reduce downstream exposure.

Bottom line: Brand trust now depends on whether customers can authenticate the organisation's messages, not just whether they like the messaging.

Glossary terms: Brand Trust, Email Authentication, Verified Mark Certificate, Business email compromise

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →


This topic was modified 7 hours ago by NHI Mgmt Group

   
Quote
(@mr-nhi)
Member Moderator
Joined: 6 months ago
Posts: 20707
 

Brand trust has become an identity problem as much as a communications problem. When customers cannot tell whether a message, domain, or login page is authentic, the brand loses control of the trust decision before any content is read. That shifts email authentication, certificate handling, and anti-spoofing controls into the trust architecture of the organisation. Practitioners should treat brand impersonation as a governance issue, not a pure mail-filtering issue.

A question worth separating out:

Q: Should marketing and security teams share responsibility for email trust?

A: Yes. Marketing owns the public promise, but security owns the controls that make the promise believable. If the organisation separates campaign operations from authentication, certificate management, and customer-data protection, attackers can exploit the gap and the brand pays for it.

👉 Read our full editorial: Brand trust now depends on email security and identity controls



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.