I published the record and nothing happened

Reports normally start within 24 to 48 hours of the DMARC record going up. If it’s been longer than that, work down this list — it’s in order of how often each one is the cause.

1. Has it really been 48 hours since we saw the record?

The clock starts when we first read the record, not when you saved it. If your DNS provider took a few hours to publish, or the record was edited later, the wait starts later too. The DMARC record section of the domain page shows what we last read and when; choose Check now to read it again.

2. Is the record at the right name?

It must be at _dmarc.example.com exactly. The most common mistake is a doubled name: typing _dmarc.example.com into a panel that adds the domain itself publishes _dmarc.example.com.example.com. If Check now says no DMARC record was published, look for this first. The free DMARC Inspector shows what’s at the right name.

3. Is there exactly one DMARC record?

Two TXT records at _dmarc — say, an old one and ours — means receivers treat the domain as having no valid DMARC record at all, and send no reports. Delete the old one, or better, edit it into the single value from your domain page.

4. Is the reporting address exactly right?

Compare the rua=mailto: address in your published record, character for character, with the one on your domain page. A record with a mistyped address looks perfect in DNS and sends its reports to nobody. Watch for:

• the address cut short when it was pasted;
• the record pasted with an extra set of quotes;
• a different domain’s reporting address (every domain has its own).

5. Does the domain send mail?

Reports describe mail that receivers have seen. A domain that sent nothing yesterday has nothing to report. If this domain only sends occasionally, give it a few more days.

6. Is the record valid?

A record that doesn’t parse — a missing v=DMARC1 at the start, a misspelled tag — is ignored by receivers. The domain page warns when the record is invalid; the DMARC Inspector explains what’s wrong with it.

Still nothing?

Reply to any email DMARCLoop has sent you, or contact us with the domain name. A person reads it, and we can see what our side has received.