# What is my next action, DKIM 0%, SPF 0%, DKIM 0%

**URL:** <https://forum.dmarcian.com/t/what-is-my-next-action-dkim-0-spf-0-dkim-0/1356>\
**Category:** Community Area\
**Created:** [September 30, 2020, 12:00am UTC](https://forum.dmarcian.com/t/what-is-my-next-action-dkim-0-spf-0-dkim-0/1356 "2020-09-30T00:00:27Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![KTTB](https://avatars.discourse-cdn.com/v4/letter/k/a8b319/32.png) [@KTTB](https://forum.dmarcian.com/u/KTTB)\
**Post date:** [September 30, 2020, 12:00am UTC](https://forum.dmarcian.com/t/what-is-my-next-action-dkim-0-spf-0-dkim-0/1356/1 "2020-09-30T00:00:27Z")

</div>

```
Source	Volume	DMARC Compliance	SPF Alignment	DKIM Alignment

```

Amazon SES 1   
0%  
SPF 0%  
DKIM 0%

I received DMARC report from Yahoo,  
.

 ![image](https://canada1.discourse-cdn.com/flex036/uploads/dmarcian/original/1X/e9d27eddd731420dc2cecb5f2f4d4ffd2fbeee08.png)

What is my next action,

---

<div class="post-metadata">

**Author:** ![opvind](https://avatars.discourse-cdn.com/v4/letter/o/e274bd/32.png) [@opvind](https://forum.dmarcian.com/u/opvind)\
**Post date:** [October 2, 2020, 6:37am UTC](https://forum.dmarcian.com/t/what-is-my-next-action-dkim-0-spf-0-dkim-0/1356/2 "2020-10-02T06:37:24Z")

</div>

IF it is legitimate mail for your (company’s) domain, THEN you should document your use of Amazonses services for email, AND configure your subscription at Amazonses to

- DKIM sign messages for your domain and/or
- use your domain in the EnvelopeFrom/ReturnPath/RFC5321.From address  
This includes publishing DNS records to support this.

IF NOT, you just ignore it.

---

<div class="post-metadata">

**Author:** ![KTTB](https://avatars.discourse-cdn.com/v4/letter/k/a8b319/32.png) [@KTTB](https://forum.dmarcian.com/u/KTTB)\
**Post date:** [October 10, 2020, 10:24am UTC](https://forum.dmarcian.com/t/what-is-my-next-action-dkim-0-spf-0-dkim-0/1356/3 "2020-10-10T10:24:42Z")

</div>

Thanks for your advice. Happy if you can explain it, I,m not familiar some wording

---

<div class="post-metadata">

**Author:** ![opvind](https://avatars.discourse-cdn.com/v4/letter/o/e274bd/32.png) [@opvind](https://forum.dmarcian.com/u/opvind)\
**Post date:** [October 13, 2020, 4:56pm UTC](https://forum.dmarcian.com/t/what-is-my-next-action-dkim-0-spf-0-dkim-0/1356/4 "2020-10-13T16:56:03Z")

</div>

One message (1) is not much to go on.

SPF says the mail comes from [amazonses.com](http://amazonses.com), DKIM says it was signed by [worldsecuresystems.com](http://worldsecuresystems.com), and none of those two domains align with the sender domain. So, DMARC fails.

Either the sender is legit, but unconfigured/misconfigured, or the sender is fraudulent. It is up to you to find out.