When SPF or DKIM alignment fails
A DMARC check includes SPF and DKIM alignment. If your DMARC report says that SPF or DKIM alignment has failed for your emails even though you've properly authenticated your domain with Zoho Campaigns, read the information below to learn why this may have happened and how to resolve it.
DMARC check
When an email is sent, its sender ID is validated and then its SPF and DKIM records are aligned. Complying with DMARC policy tells the recipient systems that the email sender has done something that only an authentic sender can do: align the DKIM and/or SPF domain with the “From” domain that the recipient sees.
SPF alignment
If you're sending emails through your business domain as "From", DMARC will compare it with the "Envelope From" (also known as "Return-Path") domain. If both the domains or their subdomains match, SPF is aligned.
Why SPF alignment fails
If you're using an email marketing service to send emails, the "Envelope From" domain is the domain of the marketing service. It is the domain used to receive bounce error messages from recipient systems. In your case, Zoho Campaigns uses "zcsend.net" as the "Envelope From" domain to collect the bounce error messages so we can display the bounce rate and reasons in your campaign report. During the DMARC check, this "Envelope From" domain will not match with the actual sender's business domain, so SPF alignment will fail. This happens not only with Zoho Campaigns but with any email marketing service.
How to resolve
DMARC requires either SPF or DKIM alignment. So, if you have DKIM authentication, you will pass the DMARC check even without SPF alignment. SPF alignment failing won't affect your email deliverability.
What you should do
If you don't have DKIM authentication, both SPF and DKIM alignment will fail, and your email won't pass the DMARC check. So, we recommend that you authenticate your domain with both SPF and DKIM to pass DMARC and improve your email deliverability.
Related Topics
Related Articles
Sender Policy Framework (SPF)
Spam is a major bottleneck issue that the email marketing industry faces on a daily basis. Fraudsters often try to forge the sender address of emails and try to perform malicious activities. The only way to protect your emails and improve ...How to setup SPF and DKIM TXT records for your domain
At Zoho Campaigns, we strongly urge you to authenticate your domain by implementing SPF and DKIM. To successfully authenticate your sender domain, you need to set up your SPF and DKIM TXT records. Authenticating your sender domain is a simple process ...What is a custom return-path and why is it important?
When you send an email campaign, you can gauge the performance of the emails that land in the inbox by calculating the open rate, click to open rate, and more. But what happens to the emails that bounce? Is there a technique to handle email bounce? ...How to authenticate my domain
Domain Authentication is a mechanism that verifies the email from the point of its origin by validating the email sender. It checks emails to rule out any possibility of spamming or spoofing thereby protecting the sender's good reputation. ...What is a Sender Policy Framework (SPF)?
The Sender Policy Framework (SPF) record is a validation mechanism used to prevent email spoofing. This policy allows the sender to list all the addresses from which emails will be sent on their behalf. During SPF validation, the email header is ...