DMARC stands for Domain-based Message Authentication, Reporting and Conformance. It checks whether a passing SPF or DKIM result aligns with the visible From domain. Domain owners can publish a policy for handling failures and request reports. A pass requires at least one aligned authentication result. Source: RFC Editor: DMARC specification

Review legitimate senders first

Ask the email provider to examine reports alongside the list of approved sending services. Investigate unexpected failures before agreeing a stricter handling policy. This gives the decision evidence from actual messages and a way to identify a legitimate service needing attention.

Keep an owner for the reports

Assign responsibility for reviewing changes in authentication results and retest when a sending platform changes. Record the agreed policy and escalation route. This turns the setup into a maintained process instead of leaving colleagues to rediscover it during a delivery problem.

Written and updated by Travelgenix. Sources checked on 19 October 2026. Practical advice and examples are Travelgenix editorial guidance.