How often are DMARC reports sent?

Once per UTC day per reporting provider, covering a window that begins at 0000 UTC (RFC 9990 section 3.1.1.4). Your first report typically arrives 24 to 48 hours after you publish `rua=`.

Why am I not receiving any reports?

Most often the `rua=` address is on a different domain and the required authorisation record at ` ._report._dmarc. ` is missing. Other causes: a syntax error in the DMARC record, two DMARC records published at once, or simply no mail claiming your domain during the window.

Is the DMARC report in my inbox legitimate?

Almost certainly. Genuine reports use the subject pattern `Report Domain: Submitter: Report-ID: ` and attach compressed XML with a bang-separated filename. Real reports contain no links to click, no payment demands and no credential requests.

Do I still need monitoring after reaching p=reject?

Yes. New services get added, DNS gets edited, DKIM keys get rotated. Reports are how you find out something broke before your customers do.

Can I just delete the reports?

You can remove `rua=` to stop them, but that trades a cluttered inbox for zero visibility into who is spoofing you. Pointing `rua=` at an analyser is the better answer.

DMARC Monitoring: How to Read Your Reports

Cookie Settings

We use cookies to improve your experience. You can choose which cookies to accept.