DMARC (Domain-based Message Authentication, Reporting and Conformance)

Also written: DMARC, dmarc=fail

A domain's published policy that requires its From address to match a passing SPF or DKIM check, and says what to do with mail that fails. A pass only proves the message came from that domain's real mail system, which is why BEC from a taken-over mailbox still passes.