DMARC Fail: Alignment reporting
A DMARC Fail is often caused by issues with DMARC alignment, this can be easily investigated and confirmed by checking the email reports.
In the Email Activity repot open up detailed view for the affected email
After that open the tab called “Headers” and look for the following header information:
- Return Path
- DKIM-Signature
The domains listed in the DKIM-Signature header should match the return path header. If this is not the case then the sender has either misconfigured their DKIM/ Outbound DMARC or the mail is a malicious attempt to impersonate a domain.
The way to resolve this is to either add a DMARC safelist exclusion or ask the sender to fix their DKIM/ DMARC policy.