How the New DMARC Standards Affect Real Estate Marketing (And Why You Need to Care)

What DMARCbis’s new RFC 9989, 9990, and 9991 change for brokerage email deliverability — and the one new DNS tag that stops fake-subdomain wire fraud cold.

Key Takeaways

DMARC just got its first major rewrite since 2015: The IETF finalized “DMARCbis” as RFC 9989, RFC 9990, and RFC 9991, replacing the original RFC 7489 and making DMARC an official IETF Proposed Standard.
The pct tag is gone: Fractional policy rollout has been removed entirely — you now test in monitoring mode, then enforce, with no gradual middle step.
A new np=reject tag closes the “fake agent” loophole: It kills email spoofed from subdomains you don’t even own — the exact trick scammers use to send fake wire instructions during closing.
Reporting still matters most: Before enforcing a strict reject policy, you need to confirm every platform your agents send from — CRM, transaction management, newsletter tool — is properly authenticated, or you risk sending client communications straight to the void.

If you work in real estate, your email reputation is everything. Whether you are sending property alerts, newsletters, or sensitive closing documents, landing in your client’s inbox—and not their spam folder—is critical to closing deals. Here’s what changed and what your brokerage needs to do about it.

The Death of the “Slow Rollout”

The change: In the past, marketers used the pct tag to gradually enforce their DMARC policies. You could tell receiving servers, “Hey, only quarantine 20% of the emails that fail authentication.” This allowed brokerages to test the waters without totally breaking their email marketing if something was configured incorrectly. Under the new standard, the pct tag has been completely removed.

The real estate impact: If you are currently setting up a new email marketing platform (like Mailchimp, Constant Contact, or a real estate-specific CRM) and trying to align it with your domain, you can no longer rely on a fractional rollout.

The solution: Use a clean “monitor, then enforce” strategy. When onboarding a new marketing tool, set your policy to p=none (monitoring mode), review your DMARC reports to ensure everything is passing, and then move directly to p=quarantine or p=reject.

Shutting Down the “Fake Agent” Loophole

The change: The most powerful addition for everyday businesses is the new np (non-existent subdomains) tag.

The real estate impact: Real estate domains are prime targets for spoofing. Scammers love to target buyers during the closing process with fake wire transfer instructions. Often, they do this by creating plausible-sounding subdomains that you don’t actually own, such as closing.yourbrokerage.com or billing.yourbrokerage.com. Previously, stopping this required complex configurations. Now, it’s incredibly simple.

The solution: By adding np=reject to your DMARC record, you are explicitly telling Gmail, Outlook, and Yahoo: “If you receive an email from a subdomain of my business that doesn’t actually exist in my DNS records, delete it immediately.” This single change drastically reduces the chance of a scammer successfully impersonating your brokerage using a fake subdomain.

More Predictable Deliverability

The change: DMARC used to rely on a community-maintained list (the Public Suffix List) to figure out where your main domain ended and your subdomains began. Now, email servers use a “DNS Tree Walk,” meaning they algorithmically check your actual domain records to figure out your setup.

The real estate impact: Many large brokerages and multi-office franchise networks use complex subdomain structures (e.g. agentname.brokerage.com or newsletter.brokerage.com). This new, algorithmic lookup method means email providers can more predictably and reliably understand your domain structure directly from your DNS settings.

The solution: You don’t need to change anything to benefit from this. It simply means your emails will be evaluated more accurately by receiving servers, potentially reducing false positives where legitimate emails get sent to spam.

Reporting Is Still Your Best Friend

The change: DMARC reporting has been formalized into its own official standard in RFC 9990. The formats are now strictly XML, and the reporting intervals are determined by the receivers (like Google or Microsoft).

The real estate impact: As a real estate marketer, you might use five different tools to send emails—a CRM, a transaction management platform, a newsletter service, and your standard inbox.

The solution: Keep reading your reports. Your rua and ruf reporting addresses function exactly as before. Before you ever enforce a strict reject policy, confirm every platform your agents use is properly authenticated — this lines up with Gmail’s bulk sender requirements, which already mandate DMARC alignment for anyone sending 5,000+ messages a day. If you skip this step, you risk sending critical marketing materials or client communications straight to the void.

Your Quick Action Checklist

The good news is that if your DMARC is already set up and working, the new standards won’t break anything. However, to take advantage of the upgraded security, real estate IT admins and marketers should:

Audit your record: Check your current DMARC record. If you see a pct tag (e.g. pct=50), remove it immediately.
Add the np tag: Update your record to include np=reject. This is a massive, easy win for protecting your clients from wire fraud and phishing.
Review before rejecting: Never guess with your email deliverability. Use a DMARC monitoring tool to ensure all your marketing platforms are passing authentication before you enforce a strict quarantine or reject policy.

In real estate marketing, trust is your most valuable asset. By understanding and updating to these new DMARC standards, you ensure that when a client sees your name in their inbox, they know for a fact it’s really you.

Not sure if your brokerage’s domain is configured correctly — or want a second set of eyes on your broader technical SEO and deliverability setup? Get a free SEO audit, book a call with our team, or explore expert SEO/GEO/AEO consulting if you need hands-on help getting it right.