When SPF or DKIM alignment fails

When SPF or DKIM alignment fails


A DMARC check includes SPF and DKIM alignment. If your DMARC report says that SPF or DKIM alignment has failed for your emails even though you've properly authenticated your domain with Zoho Campaigns, read the information below to learn why this may have happened and how to resolve it. 

DMARC check

When an email is sent, its sender ID is validated and then its SPF and DKIM records are aligned. Complying with DMARC policy tells the recipient systems that the email sender has done something that only an authentic sender can do: align the DKIM and/or SPF domain with the “From” domain that the recipient sees. 

SPF alignment

If you're sending emails through your business domain as "From", DMARC will compare it with the "Envelope From" (also known as "Return-Path") domain. If both the domains or their subdomains match, SPF is aligned. 

Why SPF alignment fails

If you're using an email marketing service to send emails, the "Envelope From" domain is the domain of the marketing service. It is the domain used to receive bounce error messages from recipient systems. In your case, Zoho Campaigns uses "zcsend.net" as the "Envelope From" domain to collect the bounce error messages so we can display the bounce rate and reasons in your campaign report. During the DMARC check, this "Envelope From" domain will not match with the actual sender's business domain, so SPF alignment will fail. This happens not only with Zoho Campaigns but with any email marketing service. 
SPF DKIM Alignment

How to resolve

DMARC requires either SPF or DKIM alignment. So, if you have DKIM authentication, you will pass the DMARC check even without SPF alignment. SPF alignment failing won't affect your email deliverability.

What you should do

If you don't have DKIM authentication, both SPF and DKIM alignment will fail, and your email won't pass the DMARC check. So, we recommend that you authenticate your domain with both SPF and DKIM to pass DMARC and improve your email deliverability.
SPF  DMARC  DKIM
    • Related Articles

    • When SPF or DKIM alignment fails

      A DMARC check includes SPF and DKIM alignment. If your DMARC report says that SPF or DKIM alignment has failed for your emails even though you've properly authenticated your domain with Zoho MarketingHub, read the information below to learn why this ...
    • How to setup SPF and DKIM TXT records for your domain

      We highly recommend our users to setup SPF and DKIM TXT records for their domains to ensure good email delivery. Adding TXT records is a very simple three-step process: Add a sender domain to your Zoho Campaigns account. Copy SPF and DKIM record ...
    • How to setup SPF and DKIM text records for your domain

      We highly recommend our users to setup SPF and DKIM text records for their domains to ensure good email delivery. Adding text records includes: Adding sender domain to your Zoho MarketingHub account. Copying SPF and DKIM record values from Zoho ...
    • What are SPF records?

      Sender Policy Framework (SPF) records are DNS records that identify the email servers which are permitted to use the particular domain name. This further helps in identifying the spam emails which could be sent by spoofing a valid domain name or an ...
    • Sender Policy Framework (SPF)

      Sender Policy Framework (SPF) record is a validation mechanism adopted by email marketers to ensure the email sender is not a spammer. This policy allows the sender to list out the various addresses from which emails can be sent on their behalf. ...