Parse your published _dmarc TXT record and grade your policy. Identify if p=none, missing rua, weak alignment or low coverage are exposing your domain to spoofing.