DMARC record set up but no reports yet: what to check

You published a DMARC record with a rua= address, and your dashboard still says it is waiting for the first report. Usually nothing is wrong: receivers send reports once a day, after the day they cover has ended. Here is how the timing works, and what to check if a report still has not arrived after two days of normal sending.

Verified 2026-11-08 against RFC 7489, the DMARC specification.

Why the first report takes a day or two

DMARC aggregate reports (the ones sent to your rua= address) do not arrive message by message. Each receiver that got mail from your domain, such as Google, Microsoft and Yahoo, collects its results and sends one report about once a day. A report covers a whole day, and most large receivers use the UTC day, midnight to midnight. The receiver sends the report after that day ends, usually within a few hours.

So the first report waits for the end of the first UTC day your record is live. A record published in the afternoon is first reported on the next morning, and a full day of data arrives the day after that:

Day 1, 15:00 UTC    you publish the record
Day 2, 00:00 UTC    Day 1 ends and receivers build its report
Day 2, morning UTC  the first reports usually arrive
Day 3, morning UTC  reports covering all of Day 2 arrive

In practice the first report usually lands 24 to 48 hours after the record goes live. Each receiver runs on its own schedule, so reports from different providers trickle in across that window rather than all at once.

Older records sometimes carry an ri= tag that asks for a different interval. Its default is 86400 seconds, one day. Receivers are free to ignore it and most report daily anyway, and the current DMARC standard (RFC 9989) removed the tag.

A receiver only reports on mail it received

A report is one receiver's account of the mail it got from your domain that day. If a receiver got no mail from your domain, it has nothing to report and sends nothing. A domain that sends little mail may hear from only one or two receivers, and on a quiet day from none.

Reports come from ordinary mail. Keep sending as you normally do: messages to Gmail and Outlook addresses give Google and Microsoft something to report on for that day.

Receivers file each message under the domain in its visible From address. If an email service sends for you with its own domain in From, that mail is reported to the service's domain, not yours, and it never shows up in your reports.

Check the record, in this order

A record that sends reports to trustyourinbox looks like this, with your own address in it:

v=DMARC1; p=none; rua=mailto:YOUR-ADDRESS@rua.trustyourinbox.com

There is exactly one DMARC record. Look up the TXT records at _dmarc.example.com. Exactly one should begin with v=DMARC1. If there are two or more, receivers ignore DMARC for the domain entirely and send no reports, so merge them into one record.
It carries a rua= tag. The address is written as a mailto link: rua=mailto: followed by the address. Without the tag, receivers can still apply your policy but have nowhere to send reports.
The address is the one for this domain. In trustyourinbox every domain gets its own report address, shown on the dashboard setup card and on the domain's DMARC tab. Reports are matched to a domain by the address they arrive at, so an address copied from another domain's record will not bring this domain's reports here.
The change has had time to spread. DNS resolvers keep a cached answer until its TTL runs out, and that includes an earlier answer that no record existed. Most changes are visible everywhere within minutes to a few hours.
The record is on the domain your mail uses. A record at _dmarc.mail.example.com covers mail sent from that subdomain only. Mail sent from example.com is looked up at _dmarc.example.com, so the record for it has to live there.

Reports sent to an address on another domain

When the rua= address is on a different domain from yours, as a monitoring service's address always is, receivers first check that the other domain agrees to take your reports (RFC 7489 section 7.1). They look for a TXT record named after your domain under the report domain:

example.com._report._dmarc.rua.trustyourinbox.com   TXT   "v=DMARC1"

trustyourinbox publishes this record for every domain, so there is nothing for you to add. If your record also sends reports to another vendor, publishing that vendor's record is the vendor's job. A missing one affects only the reports sent to that vendor.

What trustyourinbox shows while you wait

The setup card on your dashboard reads your live record. When the record sends reports to this domain's address, it says “Your DMARC record is set up correctly,” and the first reports are on their way.
After you change the record, press Scan now on the domain's DMARC tab to read it again straight away instead of waiting for the next scheduled check.
The dashboard notes that reports usually arrive within 24 hours of the day they cover. Once the first one lands, the domain's senders and pass rates fill in.

Still nothing after 48 hours of normal sending

If two full UTC days have passed, the domain has sent ordinary mail to Gmail or Outlook addresses, and no report has arrived, read the record again with the free DMARC checker. It shows every record published at _dmarc and what each tag says. If the record looks right and reports are still missing, email support@trustyourinbox.com with the domain name and we will look into it.

Frequently asked

How long does it take to get the first DMARC report?

Usually 24 to 48 hours after the record goes live. Receivers send one report a day, covering a whole UTC day, after that day ends, so the first report waits for the end of the first day your record is live.

Why do I only get reports from one or two providers?

Each receiver reports only on the mail it received from your domain that day. A domain that sends little mail, or sends mostly to one provider, may hear from only one or two receivers, and from none on a quiet day.

Do I need to publish anything else for trustyourinbox to receive my reports?

No. The rua= address in your DMARC record is the only part that is yours. The record receivers check before they send reports to an outside address is published by trustyourinbox for every domain.

Can two DMARC records stop reports?

Yes. If a domain publishes more than one DMARC record, receivers ignore DMARC for that domain entirely, so they apply no policy and send no reports. Keep exactly one record and put every tag in it.

Know when something needs you. Where you already work.

We check your domains every six hours. A critical issue goes to the bell, your inbox, a Slack channel, or a signed webhook, with a link to the domain it is about. In-app alerts are on every plan. Email starts on Lite, webhooks on Pro.

Was this page helpful?