DMARC checker

Read the published DMARC policy, report address, and reject-readiness signals for a domain. No account is required.

What DMARC decides

DMARC tells a receiver what to do when SPF and DKIM do not align with the From domain. p=none collects evidence, p=quarantine sends suspicious mail to spam or quarantine, and p=reject refuses it.

The checker also looks for a report address (rua), multiple records, policy inheritance, and blockers that make reject unsafe. A clean DNS result is not proof that every legitimate sender is known.

Common failures

DMARC is missing at _dmarc.
The record is p=none while the domain is being spoofed.
Reports are not collected, so enforcement has no evidence behind it.
SPF or DKIM passes but does not align with the From domain.

Start with DMARC is still p=none, then use the p=none to p=reject plan before changing policy.