Skip to main content
Relaymetry

Email Deliverability Statistics 2026 — DMARC, SPF & MTA-STS adoption across the top 10,000 domains

We scanned the top 10,000 domains (Tranco, June 2026): 33.3% have no DMARC record, and of those that do, only 46.4% enforce it.

Key findings

33.3%
No DMARC record
3,307 of 9,945
24.9%
No SPF record
2,472 of 9,944
27%
No MX record
2,685 of 9,945
97.8%
No MTA-STS
9,719 of 9,940
97.2%
No TLS-RPT
9,658 of 9,940
1.6%
SPF lookup overflow
163 of 9,944
Email authentication gaps across the top 10,000 domains: 33.3% no DMARC, 24.9% no SPF, 97.8% no MTA-STS; of DMARC adopters 46.4% enforce.

DMARC policy — of 6,638 adopters

Only 6,638 of 10,000 domains publish a DMARC record. Of those, the policy breakdown is:

46.4%
p=reject (enforcing)
3,083 domains
27.1%
p=quarantine
1,801 domains
25.9%
p=none (monitor only)
1,720 domains

Methodology

Population: Tranco top-10,000 list (L5434). N: 10,000 domains. Date: 2026-06-14. Resolvers: Cloudflare (1.1.1.1) and Google (8.8.8.8). 60 domains excluded due to resolver errors.

Each domain was queried for MX, SPF (TXT), DMARC (_dmarc.), MTA-STS (_mta-sts.), and TLS-RPT (_smtp._tls.) records. A domain is counted as “missing” a control when the relevant record is absent or unparseable. DKIM, blacklist presence, and DNSSEC are out of scope for this dataset (DKIM requires a selector; blacklist and DNSSEC add per-IP noise beyond DNS-record presence checks).

Learn more