What Is DMARC?

DMARC is a set of standards and policies used to validate the authenticity of an email’s sender and prevent delivery of “spoofed” email. 

“Spoofing” is when a sender has disguised who they are to appear to be someone other than who they are, usually to impersonate a trusted or legitimate account. To avoid having your email considered “spoofed,” your email should always be sent using an approved service. 

Cornell Official Email Services

When you send email using your Cornell NetID email address, or a Cornell email alias address linked to your NetID address, you must use an email client such as Outlook, Apple Mail, Thunderbird, or Gmail set up for one of these mail services:

• Cornell's Microsoft Mail Service (“Microsoft Exchange”)
• Cornell's Google Mail Service (“Cornell Google Workspace”)

Your email will not be tagged as “spoofed” and blocked by DMARC policy if you use an email client with one of these services to send mail from your Cornell email address.

Email Practices That Risk Being Blocked

Starting January 28, 2026, Cornell’s DMARC policy will be enforced. Some examples of email setups that will fail DMARC include the following:

• If you send email using your Cornell email address using services other than those mentioned above (such as a personal Gmail account), it will be blocked by DMARC and not delivered.
• If you use a third-party email and marketing vendor to send mass communications (for example, MailChimp or Constant Contact) and use your Cornell NetID email address as the sender “From” address, the mass communication will be blocked.
• If an originally legitimate email is forwarded multiple times, it can result in an email failing DMARC and therefore not being delivered.

Note that mass communications sent using Marketing Cloud or Lyris will not be blocked.

For guidance on properly setting up a process for sending mass communications, visit Official Mailings and Third-Party Mail Senders.

For background on Cornell’s DMARC Enforcement initiative, visit Cornell Moves Forward on DMARC Enforcement to Prevent Email Fraud.