Inbox Intel: from emailexpert

URGENT UPDATES for Email Marketers & Deliverability Professionals

The email landscape is experiencing unprecedented disruption right now. In this critical industry briefing, we break down the major developments threatening your email deliverability and what you need to do immediately to protect your sender reputation.

🚨 Microsoft's Authentication Enforcement Crisis - Why legitimate emails are being blocked and the DNS resolution problems causing widespread delivery failures

📧 TalkTalk Email Shutdown Alert - Thousands of UK email accounts being deleted between July-October 2025, creating massive bounce risks and spam traps

⚖️ Legal Precedents & Compliance Updates - New anti-spam lawsuits, TCPA rulings on SMS marketing, and FTC rule changes you need to know

🔐 Security Threats & Breaches - Recent phishing attacks, BEC scams, and data breaches affecting the email industry

✅ Increase your DNS TTLs to 3600+ seconds (86400 for DKIM keys) ✅ Audit your lists for TalkTalk domains (@talktalk.net, @tiscali.co.uk, etc.) ✅ Implement proper DMARC, SPF, and DKIM authentication ✅ Review your bounce handling and retry strategies

Subscribe for weekly email deliverability updates and industry insights!

Have questions about your email authentication setup? Drop them in the comments below.

#EmailDeliverability #EmailMarketing #Microsoft #DMARC #SPF #DKIM #TalkTalk #EmailAuthentication #DigitalMarketing #MarketingTechnology #EmailCompliance #CyberSecurity #BEC #Phishing #TCPA #EmailIndustry #MarketingNews #DeliverabilityNews #EmailSecurity #MarTech #EmailStrategy #ListHygiene #SenderReputation #EmailBest Practices #IndustryUpdate

Here are the show notes for this podcast episode, "Emailexpert Inbox Intel," covering critical topics in email marketing and security:

Email Expert Insights: Navigating AI Threats, Legal Minefields, and Data Pitfalls

This episode of Email Expert Insights dives deep into the most critical challenges and groundbreaking developments shaping the email landscape today, from sophisticated AI-driven cyber threats to costly legal battles and the often-overlooked problem of dirty data.

I. New Class of AI-Driven Email Threats: The Google Gemini Exploit

• AI-Driven Phishing: Cybercriminals are now leveraging AI tools not just to generate attacks, but to weaponize the recipient's own inbox AI features. A new vulnerability in Gmail's Gemini summarization feature highlights this emerging threat.

• Prompt Injection Explained: This novel phishing technique bypasses traditional email defenses by exploiting Google Workspace's AI-powered summarizer, Gemini. It requires no links, no attachments, and no visible malicious content in the email body. Instead, it relies on "prompt injection," hidden invisibly within the email, often using techniques like hidden HTML/CSS styling, to manipulate the Gemini summary.

• Demonstrated Exploit: In a real-world example, the Gemini summary falsely warned, "Gemini has detected your Gmail password has been compromised, please call us immediately at [phone number]". This "carefully crafted hallucination" is a social engineering tactic designed to induce panic and an immediate response, allowing the malicious AI summary to deliver the attack.

• Shift in Attack Surface: This incident signals a significant shift where attackers are designing exploits that target how machines interpret email content, rather than how humans do. AI-generated UI elements like summaries, alerts, and previews are now attack surfaces in their own right.

• Mitigation and Future Outlook: Google has acknowledged the issue and is "hardening its protections against prompt injection attacks". For security teams, this calls for improved input sanitization in AI summarization engines, new heuristics to detect prompt injection attempts, and enhanced user education about relying on AI-generated summaries for security-related information. Legitimate senders should also maintain clarity and consistency in message formatting and monitor inbox renderings.

II. Costly Legal Pitfalls in Email Marketing

• Nike Inc. Class Action Lawsuit: Nike is facing a proposed class action lawsuit in Washington state for using misleading subject lines that allegedly created a false sense of urgency. Examples include "Only a few hours left" or "Ends tonight," which implied imminent sale endings but promotions were reportedly extended or fabricated. The lawsuit claims violations of the Washington Commercial Electronic Mail Act (CEMA) and the Washington Consumer Protection Act.

• Crucial Legal Precedent - Brown v. Old Navy, LLC: This Nike case is significantly bolstered by a landmark Washington Supreme Court ruling in April 2025 in Brown v. Old Navy, LLC. This ruling broadly interpreted CEMA to impose a $500 statutory penalty on every commercial email containing false or misleading information in its subject line sent to Washington residents, without requiring proof of actual financial damages. The "injury is receiving the email that violates CEMA".

• Tim Hortons Class Action Lawsuit: A Quebec Superior Court judge authorized a class action lawsuit against Tim Hortons due to a "catastrophic email marketing error" in April 2024. Approximately 500,000 contest participants, including thousands in Quebec, falsely received emails stating they had won a $64,000 boat and trailer. Follow-up emails retracted the win, citing "technical issues".

• Quebec's Consumer Protection Act: The lawsuit argues that Quebec's Consumer Protection Act prevents companies from simply claiming "mistake" to void contractual agreements formed by contest win notifications.

• Lessons for Marketers: These cases highlight the importance of accuracy in subject lines (avoiding fabricated scarcity), geo-targeting compliance with specific state laws, utilizing dynamic content for timely updates, and conducting regular audits and legal reviews. The Tim Hortons incident further emphasizes the need for robust testing protocols, approval workflows, and pre-planned crisis communication templates for contest and promotional emails.

III. The Silent Saboteur: Dirty Data

• Pervasive Problem: A new report, "The State of CRM Data Management in 2025," reveals that 76% of companies admit less than half of their CRM data is accurate or complete. Furthermore, 37% attribute lost revenue directly to poor data quality through mistargeted campaigns, missed follow-ups, and distorted reporting.

• Financial Impact: Bad data is estimated to consume 15% of annual revenue (Gartner). An IBM figure places the U.S. cost of poor data quality at a staggering $3.1 trillion annually. Data scientists spend approximately 60% of their time cleaning data rather than extracting insights.

• AI Amplifies Issues: When AI tools are trained on faulty inputs, they lead to "broken logic chains," "misfiring triggers," and "personas built on outdated job titles". As AI amplifies everything, it also magnifies the problems caused by bad data.

• Pragmatic Steps for Email Professionals: To combat dirty data, professionals should run data audits to identify issues, enforce input standards using validation rules and tools like Bouncer or ZeroBounce, and automate data hygiene with tools like Dedupely and Openprise. Strategic data enrichment, prioritizing deliverability with clean lists, and aligning AI plans with verified data integrity are also crucial.

IV. Email Security Under Scrutiny: Ireland's NTMA Phishing Loss

• Significant Loss: Ireland's National Treasury Management Agency (NTMA) reportedly suffered losses of up to €5 million due to a "sophisticated, multi-layered phishing attack" that targeted staff with fraudulent payment requests.

• DMARC Configuration Weakness: While the ntma.ie domain had a DMARC record, it was configured with a p=none policy. This means it would check for failures and report them, but still allow spoofed emails to pass through and potentially land in staff inboxes, offering "little real-world protection".

• Foundational Components Missing: Additionally, SPF and DKIM, which are the foundational components DMARC relies on for authentication, appeared to be misconfigured or absent for ntma.ie.

• Importance of Proper Implementation: This incident reinforces the critical importance of properly implemented DMARC, SPF, and DKIM to significantly reduce the risk of domain spoofing. A phased approach for DMARC implementation is recommended: starting with p=none for monitoring, then gradually transitioning to p=quarantine, and finally p=reject only when confident all legitimate email is authenticated.

• Public Sector Readiness: The incident also highlights concerns about email readiness in the public sector, which often lags commercial entities in adopting best-practice authentication policies, despite new requirements from bulk senders like Gmail, Yahoo, and Microsoft. The NTMA's permissive email authentication posture was "avoidable" and underscores that a foundational DMARC policy is just the first step in a comprehensive email security strategy.

V. Industry Excellence: Jay Oram Honored

• David Baker Lifetime Achievement Award: Jay Oram, Head of Development at ActionRocket, was presented with the 2025 David Baker Lifetime Achievement Award at the ANA Email Excellence Center (EEC) awards ceremony on July 17, 2025.

• Recognizing Contributions: This award, renamed in 2024 to commemorate pioneering CRM executive David Baker, recognizes vendor-side practitioners whose careers have advanced the craft and community of email marketing.

• Innovator in Email: Oram was specifically honored for more than a decade of pushing the boundaries of interactive, AMP, and live-data email. His work has powered campaigns for major brands, and his code tutorials are widely used.

• Future Plans: Oram has teased an upcoming webinar conversation with strategist Ryan Phelan to discuss lessons and the future of kinetic email, and hinted at new accessibility tooling slated for open-source release this autumn.

Think of navigating the world of email marketing and security as sailing a ship through increasingly stormy seas. AI-driven threats are like new, unseen icebergs that AI-powered radar systems might mistake for safe passage. Legal pitfalls are the shifting sands and hidden reefs that can ground your vessel without warning if you don't understand the local charts. Dirty data is the barnacles on your hull, silently slowing you down and wasting fuel, even if your engines (AI strategies) are powerful. And proper email authentication is your ship's sturdy hull and reliable navigation systems, ensuring your communications reach their destination safely and aren't impersonated by pirates. Every part must be robust and well-maintained to avoid catastrophe.

#EmailMarketing #B2BMarketing #DataPrivacy #MarketingTechnology #EmailDeliverability #AIMarketing

📧 What's happening in email marketing this week?

From massive industry consolidations to game-changing AI tools, this episode covers the most important developments shaping the email landscape right now.

💼 MAJOR ACQUISITIONS & LEADERSHIP

🛡️ INBOX CONTROL & USER EXPERIENCE

🤖 AI & INNOVATION

🔒 SECURITY & DELIVERABILITY UPDATES

⚖️ GLOBAL PRIVACY LANDSCAPE

#EmailMarketing #B2BMarketing #DataPrivacy #MarketingTechnology #EmailDeliverability #AIMarketing

Inbox Intel the podcast for email industry professionals, an experimental podcast from emailexpert.

The overdue edition some updates from emailexpert including news about new Enterprise members Infobip and Postmastery

Email Industry Briefing – Q2 2025 (Episode 6) – Key Take-aways

Email is still mission-critical.

56 % of all vital business communication flows through email, prized for its structured, traceable, and auditable nature.

It remains the default for formal, high-stakes messages—even in mobile-first, hybrid workplaces.

Security is a top concern: phishing, data leakage, and mis-sends keep IT leaders focused on risk mitigation.

Global deliverability expertise is expanding.

Aurora SendCloud becomes emailexpert’s first Chinese Charter Enterprise Member, strengthening East–West knowledge sharing on China-specific regulations and inbox placement challenges.

The partnership underscores a push toward worldwide collaboration on compliance and deliverability best practices.

Long-term alliances reinforce industry standards.

Bouncer (email verification) upgrades to Charter Enterprise status after five years of consistent support for emailexpert events, signalling sustained commitment to quality and innovation.

MarTech consolidation + AI acceleration.

Cakemail acquired Leadfox (March 21 2025) to broaden its suite and build an AI-powered marketing assistant.

Deal exemplifies a wider trend: vendors either merge or bolt on AI to stay competitive against larger automation platforms. Leadfox continues as a standalone brand for now.

Virtual events remain a knowledge hub.

Festival of Email 2025 (8–9 Oct, online) aims to be the most interactive edition yet, with a new platform, evergreen session replay, lead-gen features, and tracks on copywriting, advanced segmentation, CRM, deliverability, and list growth.

Bottom line: Email’s central role in business endures while the ecosystem modernises—through global partnerships to tackle deliverability, strategic M&A to integrate AI, and vibrant events that keep practitioners connected and informed.

Email Industry Update: June 2025 - Major Acquisitions, AI Integration & Security Changes

The email marketing world is buzzing with major developments! This week brought us three huge industry conferences, game-changing acquisitions, and important security updates that every email marketer needs to know about.

🔥 Key Highlights:

🚨 Critical Security Alert: Millions of domains exposed due to SPF misconfigurations from major providers like Microsoft and Google - researchers successfully spoofed 26,000+ domains for just €30!

What This Means for You:

Whether you're an email marketer, deliverability specialist, or business owner using email marketing, these changes will impact your campaigns. Stay ahead of the curve!

#EmailMarketing #EmailDeliverability #EmailSecurity #AI #DigitalMarketing #MarketingStrategy

🔥 Major Industry Moves

🤖 AI in Email: Promise vs Reality

🔐 Authentication & Security Updates

⚠️ Service Disruptions & Changes

Got thoughts on this episode? Hit us up at [email protected]

Want the inside track on what we're building at emailexpert? Check out our membership options and join the conversation.