Statistic · updated monthly ·
DMARC adoption in Türkiye: .tr domains by month
As of 30 September 2026, 52.8% of the 8,673 .tr (Türkiye) domains measured by Mailskop have a valid DMARC record, and only 28.7% enforce a policy that stops forged email (quarantine or reject). The denominator: .tr domains checked on Mailskop, including research bulk scans; each is counted once, by its last scan before month end.
By: Kemal Özleyen, Cybersecurity Engineer · Check Point Workspace Security Expert · Kinetik Bilişim
DMARC on .tr domains by month
Each row is the .tr segment of that month’s published measurement report. “Valid DMARC record”: a valid record with policy none, quarantine or reject. “Enforcing”: quarantine or reject; only these stop forged email, none only asks for reports. An invalid record is the same as no record to a receiver and is counted in that column.
| Month | Measured as of | .tr domains | Valid DMARC record | Enforcing (quarantine + reject) | reject | none | No / invalid record | From bulk scans |
|---|---|---|---|---|---|---|---|---|
| September 2026 | 8,673 | 52.8% | 28.7% | 8.9% | 24.1% | 47.2% | 97.5% | |
| November 2026, so far | 8,792 | 53.1% | 28.9% | 9.1% | 24.2% | 46.9% | — |
A change from one month to the next does not by itself show an improvement or a decline: the sample changes every month with new queries and the bulk scans made for research, so part of any change comes from newly added domains.
The “November 2026, so far” row is provisional: it is recomputed every night (last computed 1 November 2026), each domain counted once by its latest scan so far. When the month ends it is replaced by the frozen monthly report. The answer and citation above use published months only. The bulk-scan share is not computed for the provisional row: it would mean re-reading the whole scan history every night.
The first measurement is September 2026. Each following month is added to this table as a row when its monthly report is published.
Method and limits
The sample is not random: it is the .tr domains checked on Mailskop. In the September 2026 snapshot, 97.5% of the latest measurements come from bulk scans — organisations queried as lists, including the company domains scanned for our research reports (denominator: the latest scan in which SPF could be measured, 8,606 domains). The figures therefore describe these lists and the domains checked one by one, not “all .tr domains in Türkiye”.
Figures about Türkiye come only from .tr domains. Turkish organisations registered under .com or other TLDs are not included: we cannot measure which of them are in Türkiye.
Each domain is counted once, by its last clean scan before the end of the month’s last day (Türkiye time). Test and invalid domains are excluded. Scanning began on 25 July 2026. DMARC is evaluated against RFC 9989.
Updates: on the first night of each month the previous month’s report is generated, published once it passes a consistency check, and this page shows the new row at the same address. The numbers of a published month do not change afterwards.
Data and citation
The data is licensed under CC BY 4.0: use it freely with attribution.
To cite: Kemal Özleyen, Mailskop (Kinetik Bilişim), “DMARC adoption in Türkiye: .tr domains by month”, 30 September 2026. https://mailskop.com/en/research/turkey-dmarc-adoption
Last updated: