Do I need to add Eventbrite to my SPF or DMARC record?

Which address does Eventbrite send from?

If Eventbrite emails frequently go to your spam or junk folders, add the following email addresses to your contacts. This will help your email provider better route the emails to your inbox. [email protected] [email protected] [email protected] [email protected]

Eventbrite says in its own documentation that this email comes from [email protected], [email protected], [email protected] or [email protected]. That is Eventbrite's own domain, so the email is checked against Eventbrite's records, not yours.

Why does my DMARC record not cover these emails?

Author Domain: The domain name of the apparent author, as extracted from the RFC5322.From field.

DMARC is read for the domain in the From address a reader sees. When that domain is Eventbrite's, the check uses Eventbrite's records.

So your policy, from p=none to p=reject, has no effect on these emails. There is nothing to add to your SPF record for them.

What should I watch for with Eventbrite email?

A forged email can copy the look of a Eventbrite message from any address. Read the address it came from, not the name shown, before you open a link or make a payment.