New PCI DSS Rule Mandates DMARC for Email Security

The PCI Security Standards Council now requires DMARC implementation under Section 5.4.1 of PCI DSS v4.0 to prevent email spoofing and phishing. Merchants and service providers handling credit card data must comply to maintain security and avoid penalties. This affects how organizations authenticate their email domains for payment-related communications.

Sources (1)