DMARC record has no reporting address

DMARC (Domain-based Message Authentication, Reporting and Conformance) protects your domain from being used in spam and phishing emails. Your DMARC record is set up, but the optional rua field — which tells receiving servers where to send reports about email authentication results — is missing. Without a reporting address, you receive no data about how your domain is being used in email. You cannot tell whether legitimate emails are failing authentication, or whether criminals are attempting to spoof your domain. Add an rua= address to your DMARC DNS record pointing to an email inbox or a dedicated DMARC reporting service. Many free and low-cost DMARC monitoring tools can receive and interpret these reports for you.

Why this matters

Without a reporting address, you receive no data about how your domain is being used in email. You cannot tell whether legitimate emails are failing authentication, or whether criminals are attempting to spoof your domain.

How to fix it

Add an rua= address to your DMARC DNS record pointing to an email inbox or a dedicated DMARC reporting service. Many free and low-cost DMARC monitoring tools can receive and interpret these reports for you.