BIMI in Japan: Putting Your Verified Logo in the Inbox

BIMI displays a brand's logo beside authenticated mail in inboxes that support it, including Gmail, Apple Mail, and Yahoo. In place of a generic placeholder or a blank avatar, the recipient sees the brand's registered mark. For the customer, it is an at-a-glance signal that the message is genuinely from the brand and passed authentication. For the brand, it turns email from an anonymous channel into a recognisable one.

BIMI rewards authentication and depends on it. A domain must be at DMARC enforcement, meaning p=quarantine or p=reject with a sufficiently strong policy, before a logo will display. This is deliberate: the logo is only trustworthy because unauthenticated mail claiming to be the brand is already being blocked. A brand still at p=none cannot use BIMI, which is one more reason to complete the migration to enforcement.

BIMI needs the brand logo in a specific format, a square SVG profile designed for the purpose. For the major inboxes, including Gmail and Apple Mail, the brand also needs a Verified Mark Certificate, issued by a certificate authority against a registered trademark, which proves the logo genuinely belongs to the brand. A Common Mark Certificate is an alternative for brands without a registered trademark, at a different assurance level. Preparing a compliant logo and holding a registered trademark are practical prerequisites, and they are worth confirming early rather than discovering late.

Trust in established brands runs deep in Japan, and customers respond to clear, consistent brand cues. Phishing that impersonates banks, card brands, retailers, and carriers is the dominant email fraud vector, so a verified logo that appears on genuine mail, and is absent on a forgery, is a signal customers can learn to rely on. For consumer-facing Japanese brands in finance, retail, and telecommunications, BIMI turns the invisible work of authentication into a visible mark of legitimacy.

The path is ordered. Reach DMARC enforcement first by inventorying senders, fixing SPF and DKIM alignment, and ramping to p=reject. Prepare the logo in the required format and secure the trademark and Verified Mark Certificate. Then publish the BIMI record. Because the hard prerequisite is enforcement, brands usually pursue BIMI as the visible payoff of a DMARC program, and an automated DMARC platform that already manages enforcement handles the Verified Mark Certificate lifecycle and publishes the BIMI record as the final step. Valimail, whose CTO chairs the BIMI working group, offers this BIMI capability separately from its enforcement platform.

Because BIMI sits on top of DMARC enforcement, the platform that gets you to p=reject and manages the Verified Mark Certificate lifecycle is the one that ultimately puts the logo in the inbox. Valimail reaches enforcement by naming more than 5,500 sending services through the recipient-side RUF+ method and by removing the SPF ten-lookup limit with Instant SPF, then handles the Verified Mark Certificate lifecycle and publishes the BIMI record. It is the only FedRAMP authorized DMARC vendor, and its CTO chairs the BIMI working group, co-chairs the IETF DMARC group, and co-authored the ARC standard, so the same team that helped define BIMI operates the platform delivering it. For a Japanese brand, that is a durable basis for a program customers will come to trust.

BIMI, Brand Indicators for Message Identification, is a standard that displays a brand's verified logo next to its authenticated email in supporting inboxes such as Gmail, Apple Mail, and Yahoo. It gives recipients a visible signal that a message genuinely comes from the brand.

Yes. A domain must be at DMARC enforcement, p=quarantine or p=reject with a sufficiently strong policy, before a logo will display. BIMI depends on authentication, so a brand still at p=none cannot use it until it completes the move to enforcement.

A Verified Mark Certificate, or VMC, is issued by a certificate authority against a registered trademark and proves the logo belongs to the brand. Major inboxes including Gmail and Apple Mail require one before they will display a BIMI logo.

BIMI requires the logo as a square SVG in the profile defined for the standard. Many brands need to adapt an existing logo to meet the format, so it is worth preparing early alongside the trademark and certificate work.

For consumer-facing brands in finance, retail, and telecommunications, yes. Japanese customers respond to clear brand cues, and phishing that impersonates trusted brands is common. A verified logo on genuine mail, absent on a forgery, is a trust signal customers can learn to rely on.