Build a DMARC TXT record for your domain. Start with p=none and aggregate reports, then tighten to quarantine/reject.
_dmarc.example.com
v=DMARC1; p=none; rua=mailto:dmarc@example.com; adkim=r; aspf=r