Tim Draegen is one of the original authors of the DMARC specification and the founder of dmarcian, Inc., a company built to help other organizations monitor and enforce the very standard he helped write. On July 10, 2026, the Fourth Circuit Court of Appeals affirmed a preliminary injunction protecting dmarcian from a former European partner that had copied its name, its website, its logo, and a chunk of its customer base. It took five years, a Dutch court proceeding, a contempt finding, and a $400,000 sanction to get this far, and the case is still not fully resolved. The irony is hard to miss: the company that exists to help others prove who they really are had to spend half a decade proving it in federal court.
How a Handshake Deal Became a Legal War
The relationship started innocently enough. In 2014, a Dutch businessman told Draegen he had registered the domains dmarcian.eu and dmarcian.nl. Talks continued for more than a year, and in January 2016 Draegen traveled to the Netherlands to meet him in person. The agreement that came out of that meeting, according to court records, was never put in writing. The Dutch company rebranded as dmarcian Europe BV in 2017 and operated for years as dmarcian’s European arm, building its own developers and its own customer relationships along the way.
Late in 2019, the relationship broke down. The Dutch entity asserted ownership over portions of the dmarcian codebase its own developers had written. Talks to resolve the disagreement went nowhere. dmarcian, Inc. filed suit in March 2021 in the Western District of North Carolina, bringing fifteen causes of action, including copyright infringement, trademark infringement, trade secret misappropriation, and tortious interference. By then, the Dutch company had rebranded again, this time as DMARC Advisor BV, and according to the court record it was running a website nearly identical to dmarcian’s original, using its name, logo, and marketing materials to compete directly for the same American customers, and had already persuaded at least one US company to switch providers.
What Contempt and $400,000 Bought
The district court moved fast on the merits, issuing a preliminary injunction after finding dmarcian, Inc. was likely to succeed on its claims. Compliance was another matter. When the Dutch company failed to correct statements it had made to a court in the Netherlands as ordered, the district court held it in civil contempt and imposed a $400,000 monetary sanction. That figure is worth sitting with: it is the price of enforcing a single ruling in a dispute where the underlying wrong was already established, not the cost of winning the case in the first place.
The Abitron Wrinkle
Midway through the appeal, the Supreme Court decided Abitron Austria GmbH v. Hetronic International, Inc., narrowing how far the Lanham Act reaches outside US borders by shifting the test from the effects of infringing conduct to the location of the conduct itself. DMARC Advisor argued this new standard should sink the case. The district court instead issued a second amended injunction built around the conduct-focused test, dropping the copyright claim but keeping trademark, trade secret, and tortious interference intact. The Fourth Circuit agreed with that approach on July 10, 2026, holding that DMARC Advisor’s US-directed conduct, targeting American customers with a copycat brand, still counted as infringing use in US commerce under the Lanham Act, and that the Defend Trade Secrets Act’s own extraterritoriality provision was independently satisfied by acts furthering the misappropriation that took place inside the United States.
Why This Case Matters Beyond the Courtroom
Strip away the procedural history and this is a brand impersonation case: one organization built a look-alike of another and used it to redirect customers. That is the exact failure mode DMARC was designed to close at the technical layer, an unauthorized party presenting itself as a trusted sender. What this ruling makes clear is how much slower, costlier, and less certain the legal remedy is compared to the technical one. dmarcian had the resources, the standing, and five years to pursue a federal case through two rounds of appeal. Most organizations targeted by a copycat website, a cloned brand, or a look-alike domain do not have that runway, and by the time a court weighs in, the damage to customer trust is usually already done.
The Takeaway
Even the people who wrote the rules for verifying sender identity needed a federal appeals court to stop someone from impersonating their own company. That should reframe how any organization thinks about brand and domain protection: courts can eventually undo the damage, but they cannot prevent it, and they certainly cannot do it quickly. Locking down your own domains with strong DMARC enforcement, watching who else is sending mail claiming to be you, and monitoring for look-alike domains before they gain traction with your customers is the cheaper fight to have, because it is the one you can win before it ever needs a judge.
Excello Mail gives you continuous visibility into who is sending mail on behalf of your domains, so you can catch an impersonator using your name long before it turns into a five-year legal battle. Sign up for free to Excello Mail and see who is really sending as you.