rua specifies where aggregate reports go — daily XML summaries of all mail claiming to be from your domain (this is the one you rely on). ruf specifies forensic/failure reports — per-message samples of failures. Most providers don’t send ruf for privacy reasons, so rua is what matters.
A daily per-source summary: IPs, volumes, SPF/DKIM pass and alignment. This is how you discover senders and verify readiness for enforcement.
Redacted samples of individual failing messages. Useful in theory, but rarely sent today due to privacy concerns — don’t depend on it.
Check your DMARC record now
Open the free DMARC checker →No — aggregate (rua) reports are sufficient for discovering senders and reaching enforcement. Set rua; ruf is optional and often ignored.
