Free DMARC checker. Are fakes of you stopped?
DMARC tells inboxes what to do with email that pretends to be from you. Check your rule in seconds, with plain-English results.
What DMARC does
DMARC is a rule in your DNS that tells receiving inboxes what to do when a message claims to be from your domain but fails your sender checks. It can ask them to only report it, to put it in spam, or to refuse it.
It works on top of your SPF record and DKIM signatures: a message passes DMARC when one of those passes and matches the address the reader sees. That is what stops a scammer sending a fake invoice that shows your company name and address.
Getting from none to reject safely
1. Watch. Publish p=none with a reporting address and let the reports show who sends as you.
2. Fix the senders. Add missing services to SPF, switch on DKIM signing in Microsoft 365 or Google Workspace, and retire anything you no longer use.
3. Tighten. Move to p=quarantine, keep watching the reports, then move to p=reject.
Skipping step 2 is how businesses end up blocking their own invoices.
Checking more than DMARC
The check above also looks at your mail servers and SPF record. For every record type, use the full email and DNS checker. If your mail is landing in spam, read business email going to spam.
Common questions
Where does a DMARC record go?
It is a TXT record at _dmarc.yourdomain.com, set wherever your DNS is managed (Cloudflare, GoDaddy, your registrar). It starts with v=DMARC1 and must contain one p= setting.
Which DMARC policy should I use?
Start with p=none plus a reporting address, which only watches. Once the reports show every real sender passing, move to p=quarantine (fakes go to spam), then p=reject (fakes are refused). Jumping straight to reject can block your own invoices or newsletters.
Is p=none enough?
Not for long. It reports on fake email but still lets it through, so it does not protect your customers. It is the right first step, not the finish line.
Do I need DMARC if I only send a little email?
Yes. DMARC protects your name more than your volume: scammers fake small businesses precisely because they rarely have it. Large mailbox providers such as Google and Yahoo also require it from bulk senders.
Why does the checker say a subdomain has no DMARC?
We check the exact name you enter. A subdomain such as mail.example.com is normally covered by the main domain’s rule, so check the main domain too.
Related help
Free email and DNS checker
Check your mail servers, SPF and DMARC in seconds, explained in plain English.
Free SPF checker
See if your approved-sender list exists, is valid and protects your domain.
Free DKIM checker
See whether your email carries a digital seal that proves it really came from you.
Free email header analyzer
Paste an email’s headers to see its route, delays and sender checks, in your browser.
Business email going to spam
Authentication, reputation, and the fixes that actually move the needle.
Get a quote
Tell us what you need and we will map out the simplest path.
Need a DNS or email problem fixed?
We can investigate your setup and quote a one-time repair, done remotely. If you need continued help, ask about remote IT support.