Why DMARC?
What DMARC is, why it matters, and whether you already have enough with SPF and DKIM.
Why should I care about DMARC?
Without DMARC at enforcement, anyone on the internet can put your domain in the From address and email your customers and staff as you. That is how invoice fraud, fake password resets and payment scams work. DMARC tells the receiving mailbox to reject anything that is not genuinely from you, so attackers cannot impersonate your domain.
Is SPF and DKIM enough?
No. SPF and DKIM prove that a message came from an authorised server, but on their own they do nothing about the address your recipient actually sees. DMARC ties them to the visible From domain and tells receivers what to do when a message fails. Without it, a forged email can still land looking exactly like you.
Do small companies need DMARC?
Yes, and often more so. Smaller companies are targeted precisely because their domains are usually unprotected, and one convincing invoice or payroll email can do real damage. DMARC is one DNS record and costs nothing to start, so the size of the company is not the deciding factor. Being reachable by email is.
Keep reading
Next enforcement decision
See where your own domain stands.
Check your domain free, then reach full enforcement without breaking legitimate email.