How does DMARC work?
DMARC works in conjunction with SPF and DKIM to report on the compliance of email sent on behalf of your domain. Inbox providers prioritize email from senders that have email that is SPF compliant and DKIM signed.
The important thing to understand is that inbox providers look at your entire email volume, all email that uses your domain in the “From”, including your legitimate email, 3rd party senders, spam and spoofing. In some cases, spam and spoofing email sent on behalf of your domain may dwarf legitimate communications. The only way to know is to request DMARC summary reports from inbox providers, process those reports and take actions based upon key information in the reports.