DMARC aggregate reports

When your DMARC record includes an rua= address, participating mailbox providers (Google, Microsoft, Yahoo and others) periodically send an XML report to that address summarising the mail they saw claiming to be from your domain: which sending IPs, whether SPF and DKIM passed and aligned, and what your policy told them to do about it.

Why they matter

Aggregate reports are how you discover senders you didn't know about — a marketing platform set up years ago, a CRM a different team configured, a website contact form relaying through a host's default mail server. Without reading reports first, moving DMARC to enforcement risks silently blocking one of these.

What receiving reports doesn't tell you

Not every mailbox provider sends aggregate reports, and coverage varies. Receiving reports for a period is evidence about what was observed in that window — it is not proof every possible sender has been captured. Treat a clean report history as increasing confidence, not a guarantee.

The Pro and Agency plans on this product parse and summarise these reports automatically — see pricing.