DMARC Policy

In order to have a valid BIMI record, you must also have a valid DMARC record with a policy of either "quarantine" or "reject". This ensures that any fake emails sent from the domain are rejected or marked as spam. This is currently the best way to protect a website's email reputation.