ONLINE
Deliverability Letter

DMARC

Also known as: Domain-based Message Authentication Reporting and Conformance

DMARC is an email security policy that tells receiving mail servers what to do when messages from your domain fail SPF or DKIM checks. It helps stop spoofing and gives you reports about who is sending email using your domain.

DMARC sits on top of SPF and DKIM and acts like a clear set of rules for your domain. When someone sends email that claims to be from you, the receiving server checks those records. If the checks fail, DMARC tells the server whether to deliver, send to spam, or reject the message. This cuts down on fake email that can confuse your customers or hurt your brand.

DMARC matters because inbox providers trust domains that use it correctly. With a good DMARC policy, more of your real email reaches the inbox instead of spam. It also makes it harder for scammers to send phishing emails that look like they came from your brand. Over time, this improves your reputation and the performance of your email marketing.

Most teams start with a gentle DMARC policy that only monitors traffic. They review the daily reports to find all the services that send email for their domain, such as their app, support tool, or billing system. Once everything is authenticated, they move to a stricter policy that quarantines or rejects failing messages. This gives strong protection without breaking legitimate email.