Error guide / DMARC policy reject (p=reject)

DMARC reject: message blocked by policy

A DMARC reject means your message failed DMARC and your domain's policy told the recipient to block it. DMARC ties SPF and DKIM to your domain: if neither check aligns with the address in the From field, the mail is refused. With a p=reject policy such a message does not even reach spam, it is simply not accepted.

What causes it

The domain owner or its setup is at fault: SPF or DKIM is not aligned with the From domain, or a third-party service sends mail without being connected to your DKIM. Sometimes p=reject was set too early, before SPF and DKIM were configured for every sender.

How to fix it

1. Make sure both SPF and DKIM work correctly for the domain, since DMARC relies on them.
2. Check alignment: the From domain must match the domain in SPF or in the DKIM signature.
3. Connect DKIM to every sending service, not just your main mailbox.
4. Temporarily relax the policy to p=none or p=quarantine until all failures are gone.
5. Turn on rua= reporting in the DMARC record to see which senders are failing.
6. Return to p=reject only when reports confirm your legitimate mail passes cleanly.

Related errors

• 550 SPF check failed The 550 SPF check failed error
• Листи потрапляють у спам Emails going to spam
• 550 5.7.1 Message rejected The 550 5.7.1 rejected error
• DKIM signature verification failed DKIM fail: signature does not verify