Skip to content

DMARC record has no reporting address

DMARC (Domain-based Message Authentication, Reporting and Conformance) protects your domain from being used in spam and phishing emails. Your DMARC record is set up, but the optional rua field - which tells receiving servers where to send reports about email authentication results - is missing.

Why this matters

Without a reporting address, you receive no data about how your domain is being used in email. You cannot tell whether legitimate emails are failing authentication, or whether criminals are attempting to spoof your domain.

How to fix it

Add an rua= address to your DMARC DNS record pointing to an email inbox or a dedicated DMARC reporting service. Many free and low-cost DMARC monitoring tools can receive and interpret these reports for you.

Turn website findings into an action plan

Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.

Start Full Audit