Check 16 of 54 · Email authentication
What your DMARC reports say happened to mail sent in your name over 30 days: how much passed, how much failed, and where the failures came from.
Engine 1.57.0, read 25 October 2026
Can someone send email as you?
The DMARC reports receivers send us for your domain: the messages they counted, the ones that failed authentication and their largest source, and any impersonation incident open against it. Up to ten signing keys seen in them are looked up beside the common ones, so a custom DKIM selector is found. It informs and never changes the score.
Your records say what receivers should do. The reports show what they saw: the senders still failing authentication, a look-alike sending as you, and the signing keys your real mail uses.
It is context: background only. It is never graded, so nothing it finds lowers your score.
Read on the full scan of a domain whose DMARC reports come to us, as a managed domain's do. The free check reads no reports.
It reads the DMARC reports your domain sends us, so it runs on a domain whose reports come to us, not on the free check.
Check 16 is one of 16 in Email authentication. See it in its row on the scanner page, beside the rest of Email authentication.
This check runs on a customer's own verified domains. The free check runs over 40 checks in about 30 seconds, with no account.