Reviewed by: QuickDMARC Security Team · Email Authentication Specialists ·

DMARC RUA

RUA is DMARC aggregate reporting. The rua tag lists mailto: addresses (or HTTP endpoints) where receivers send periodic XML summaries of authentication results.

DNS example

You can list multiple rua URIs separated by commas. External receivers often require a DNS confirmation record proving you authorize reports to their domain.

v=DMARC1; p=none; rua=mailto:[email protected]

Why RUA matters

Without RUA you are flying blind: you cannot see shadow IT, misconfigured ESPs, or spoofing attempts before enforcement.

How QuickDMARC helps

Point rua at QuickDMARC (or use Managed DMARC) to centralize reporting across domains and clients.

Frequently asked questions

Is rua the same as ruf?

No. rua is aggregate; ruf is failure/forensic reporting.

Can rua be an HTTP URL?

The spec allows other URI schemes, but mailto is the common interoperable choice.

How often do reports arrive?

Typically daily, depending on the reporting organization.

Related resources