DMARC reports not arriving
Aggregate or failure reports are not received.
Problem summary
Aggregate or failure reports are not received.
Symptoms
- rua configured but no aggregate XML arrives
- Mailbox filters quarantine report mail
- External analyzer shows zero volume
Possible causes
- Wrong rua address or unmonitored mailbox
- External destination lacking DNS authorization
- Low volume domain — reports are infrequent
- Provider not sending aggregates for that domain yet
How to diagnose
- Confirm rua in the live _dmarc record
- Check spam/junk and analyzer ingestion logs
- Verify external reporting authorization records if rua is off-domain
How to fix
- Fix rua/ruf addresses; authorize external receivers in DNS
- Use a dedicated report mailbox or commercial DMARC inbox
- Send enough authenticated mail to generate aggregates, then wait a reporting cycle
How to verify
- At least one aggregate report received and parsed
- Known test sends appear in subsequent reports
Prevention
- Monitor report freshness (days since last rua)
- Document the report destination owner
When to escalate
- Production mail is failing for a material share of recipients after remediation attempts