How to Check Why Your BIMI Logo Isn't Showing

A BIMI logo only shows when four things are in place: DMARC at enforcement, a BIMI record, a logo in the right SVG format and, for Gmail, a mark certificate. Paste the domain, or a whole list, into the bulk BIMI checker: each row shows which of the four is missing.

Check BIMI on one domain or a list →

Check it with the tool

1. Open the bulk BIMI checker.
2. Paste one domain or up to 100, one per line (500 after a free Google sign-in).
3. Press Check BIMI. Each domain's default._bimi and _dmarc records are read, and the logo and certificate are fetched once each.
4. Read each row: Ready, Needs work, No BIMI record or Lookup failed, with the DMARC policy, the logo checks and the certificate type and expiry.
5. Fix the first failing check on each row and run it again.

Check it by hand

The record and the DMARC policy it depends on:

dig +short txt default._bimi.ebay.com
# "v=BIMI1;l=https://vmc.digicert.com/9e57aa28-3230-463f-b92e-ba8cd5612c17.svg;a=https://vmc.digicert.com/9e57aa28-3230-463f-b92e-ba8cd5612c17.pem"

dig +short txt _dmarc.ebay.com | grep -o '[; ]p=[a-z]*'
#  p=reject

The logo: it should load, be served as SVG, and use the Tiny PS profile with a title:

curl -s -o /dev/null -w "%{http_code} %{content_type}\n" https://vmc.digicert.com/9e57aa28-3230-463f-b92e-ba8cd5612c17.svg
# 200 image/svg+xml

curl -s https://vmc.digicert.com/9e57aa28-3230-463f-b92e-ba8cd5612c17.svg | grep -o 'baseProfile="[^"]*"\|viewBox="[^"]*"\|<title>[^<]*</title>'
# baseProfile="tiny-ps"
# viewBox="0 0 216 216"
# <title>bimi-svg-tiny-12-ps</title>

The certificate: who issued it and when it expires:

curl -s https://vmc.digicert.com/9e57aa28-3230-463f-b92e-ba8cd5612c17.pem -o vmc.pem
openssl x509 -in vmc.pem -noout -issuer -dates
# issuer=C=US, O=DigiCert, Inc., CN=DigiCert Verified Mark RSA4096 SHA256 2021 CA1
# notBefore=Jul 31 00:00:00 2026 GMT
# notAfter=Jul 30 23:59:59 2027 GMT

We ran these on 9 November 2026. The PEM holds the whole chain; openssl x509 reads the first certificate in it, which is the mark certificate.

For comparison, dig +short txt default._bimi.mailchimp.com returned a record with an l= logo (also Tiny PS) and no a= tag. That's a valid record, and it can work where providers accept self-asserted BIMI, but not in Gmail.

The checklist, in order

1. DMARC at enforcement. Google's Set up BIMI page says the policy "must be set to quarantine or reject", that BIMI "doesn't support DMARC policies that have the p option set to none", and that pct "must be set to 100". Use the bulk DMARC checker to see where each domain stands.
2. A record at default._bimi.<domain> starting v=BIMI1, with l= pointing at the logo over HTTPS.
3. The logo format. Google requires SVG Tiny PS. The BIMI Group's sender FAQ asks for a square file with no external resources, scripts or embedded raster images.
4. A mark certificate for Gmail. Google says the certificate "must be a Verified Mark Certificate (VMC) or a Common Mark Certificate (CMC)", named in a=. Check its expiry: an expired certificate is a common reason a logo disappears.
5. Time and reputation. Google says it can take up to 48 hours for a logo to show. The BIMI Group says each provider "has their own criteria" for when to display one, so a passing check is a requirement, not a promise.

For costs and whether BIMI is worth it, see the BIMI setup guide. For how many brands get it right, see our BIMI adoption study.

Next step: protect the reputation the logo depends on

Providers weigh sender reputation before showing a logo, and bounces from dead addresses hurt it. Upload your list at /verify to check every mailbox without sending. The first 100 checks are free with a Google sign-in, no card.

Pro, $39 a month: Unlimited email verification.* Never metered, never cut off. See pricing.

*Fair use: the first 100,000 checks a month at full speed, then slower, never cut off.

More: DMARC from none to reject, check DMARC for all your client domains.