Why am I not receiving DMARC reports?

Short answer

If no DMARC reports arrive, check four things: your record has a valid rua=mailto: address, the mailbox exists and can handle volume, cross-domain reporting is authorized if reports go to a different domain, and that you’ve waited — aggregate reports are sent once a day, not instantly.

The cross-domain gotcha

If your rua address is on a different domain than the one being reported on, that domain must publish an authorization record: yourdomain.com._report._dmarc.reportingdomain.com with value v=DMARC1. Without it, many receivers silently drop the reports.

Other causes

A typo in rua, a full or non-existent mailbox, or an over-aggressive spam filter on the receiving inbox. Reports are XML attachments and can be bulky — use a mailbox or tool built to ingest them.

  1. 1

    Confirm your rua is set

    Check the record:

    $ dig TXT _dmarc.yourdomain.com +short

Check your DMARC record now

Open the free DMARC checker →

Frequently asked questions

How often do DMARC reports arrive?

Aggregate (rua) reports are sent roughly once every 24 hours by each receiver, so allow at least a day or two before concluding something is wrong.

Do I need forensic (ruf) reports too?

No — most providers don’t send them for privacy reasons. Aggregate (rua) reports are what you rely on.

Reporting is defined in RFC 7489 §7.

Reviewed by the Skysnag Security Team. Last updated .