From Dev.to
Someone is sending email from your domain: how to stop it with DMARC
If someone is sending email that appears to come from your domain, the fix is to publish SPF, turn on DKIM signing for your own domain, and move your DMARC policy to p=reject so receivers that enforce...