Recipients Management Guide

Learn how to set up and manage recipients who will receive DMARC report summaries

Understanding Recipients

Recipients are email addresses that receive automated summaries of your DMARC reports. These summaries help keep your team informed about email authentication status without requiring them to log into the SpoofMon dashboard.

Why Set Up Recipients?
  • Proactive monitoring: Get notified of issues without manual checking
  • Team awareness: Keep IT staff and security teams informed
  • Trend identification: Spot patterns in email authentication
  • Compliance reporting: Share summaries with management

Adding Recipients

Step 1: Navigate to Recipients

  1. Log into your SpoofMon dashboard
  2. Click on "Recipients" in the main navigation menu
  3. You'll see your current recipients list and an "Add Recipient" button

Step 2: Add New Recipient

  1. Click the "Add Recipient" button
  2. Fill in the required information:
    • Email Address: Valid email where reports will be sent
    • Display Name: Friendly name for identification (e.g., "IT Security Team")
    • Domains (optional): Limit reports to specific domains
  3. Click "Add Recipient" to save

Step 3: Email Verification

After adding a recipient, the verification process begins automatically:

  1. A verification email is sent to the recipient's address
  2. The recipient must click the verification link within 24 hours
  3. Once verified, the recipient will start receiving report summaries
  4. Unverified recipients will not receive any reports
Verification Requirements
  • Each email address must be verified before receiving reports
  • Verification links expire after 24 hours
  • You can resend verification emails if needed
  • Corporate email filters may block verification emails

Recipient Status and Management

Status Indicators

Each recipient shows a status that indicates their current state:

Verified

Email address is verified and actively receiving report summaries.

Pending Verification

Verification email sent but not yet confirmed by recipient.

Verification Failed

Verification link expired or email bounced. Resend verification required.

Inactive

Recipient disabled or suspended from receiving reports.

Available Actions

For each recipient, you can perform various management actions:

Action Button Description When to Use
Resend Verification Verify Send new verification email Verification failed or expired
Edit Recipient Edit Modify name or domain settings Update recipient information
Disable/Enable Toggle Temporarily stop/resume reports Vacation or role changes
Remove Recipient Remove Permanently delete recipient No longer needs reports

Domain-Specific Recipients

Filtering by Domain

You can configure recipients to receive reports for specific domains only:

All Domains

Best for:

  • IT administrators
  • Security teams
  • Management oversight
  • Small organizations
Specific Domains

Best for:

  • Department-specific domains
  • Business unit separation
  • Client-specific domains
  • Large organizations

Setting Up Domain Filtering

  1. When adding or editing a recipient, look for the "Domains" section
  2. Leave blank to receive reports for all domains
  3. Select specific domains to limit reporting scope
  4. You can modify domain assignments at any time

Report Delivery Schedule

When Recipients Receive Reports

Report summaries are sent on a regular schedule:

  • Daily Summaries: Sent each morning with previous day's activity
  • Weekly Summaries: Comprehensive weekly overview sent on Mondays
  • Monthly Reports: Detailed monthly analysis sent on the 1st of each month
  • Alert Notifications: Immediate notifications for significant security events

Report Content

Each summary email includes:

  • Total number of DMARC reports processed
  • Authentication success/failure rates
  • Top sending sources (IP addresses and organizations)
  • Notable changes or trends
  • Quick links to detailed reports in the dashboard

Troubleshooting Delivery Issues

Common Delivery Problems

Possible Causes & Solutions:
  1. Spam folder: Check spam/junk mail folders
  2. Email filters: Corporate filters may block automated emails
  3. Invalid address: Verify email address is correct
  4. Server delays: Allow up to 15 minutes for delivery
  5. Resend: Use the "Resend Verification" button

Check These Items:
  1. Verification status: Ensure recipient is verified
  2. Domain activity: Verify domains are receiving DMARC reports
  3. Email filters: Whitelist sender address
  4. Recipient status: Confirm recipient is not disabled
  5. Domain filtering: Check if recipient is limited to specific domains

Reduce Email Volume:
  1. Adjust frequency: Switch from daily to weekly summaries
  2. Domain filtering: Limit to specific domains
  3. Threshold settings: Set minimum report counts for notifications
  4. Multiple recipients: Distribute different domains to different people

Best Practices for Recipients

Who Should Be Recipients?

Essential Recipients
  • IT Security Team
  • Email Administrator
  • Domain Owner
Optional Recipients
  • IT Manager
  • Compliance Officer
  • Business Unit Leads
Avoid Adding
  • Shared inboxes
  • External contacts
  • Temporary accounts

Recipient Management Tips

  1. Start small: Begin with 1-2 key recipients
  2. Use meaningful names: Clear display names help with management
  3. Regular reviews: Audit recipient list quarterly
  4. Document purposes: Keep notes on why each recipient was added
  5. Test verification: Verify new recipients can receive emails
  6. Monitor engagement: Remove recipients who don't need reports anymore
Pro Tips for Recipient Success
  1. Set up recipients before adding domains to ensure immediate notifications
  2. Use role-based email addresses ([email protected]) for continuity
  3. Create separate recipients for different alert types or domains
  4. Coordinate with your email team to prevent delivery issues
  5. Keep backup recipients in case primary contacts are unavailable
  6. Review recipient effectiveness during security reviews