Check your DMARC record.
DMARC tells receivers what to do with mail that fails SPF and DKIM, and sends you reports about everyone sending from your domain. Gmail and Yahoo have required it since 2024.
What to fix, in this order
Nothing to fix in this check.
Before you ask.
I have p=none, is that enough?
To start, yes: p=none blocks nothing but turns reports on. After 2-3 weeks of reading reports, once all your sending channels pass SPF or DKIM, move to p=quarantine and then p=reject.
What is rua and why do reports not arrive?
rua is the address receivers send daily XML reports to. If it sits in a different domain than the one checked, that domain must publish an authorization (yourdomain._report._dmarc.report-domain). Without it some receivers will not send reports.
How do I read DMARC reports?
Raw XML is unreadable; use a free report viewer or put a report service address in rua. You are looking for IP addresses sending from your domain that are not yours.
Would you rather have meset it up and watch it?
WooCommerce store support plans from 1,200 PLN net per month, no minimum term. For a 20-minute call I keep two fixed slots: Tuesday and Thursday, 18:00-19:00 CET.