SPF checks the envelope sending server is not forged to prevent your domain from being blacklisted and reduce spam.
DMARC checks the FROM address is not forged to prevent phishing.
https://blogs.technet.microsoft.com/eopfieldnotes/2015/12/23/troubleshooting-and-identifying-spoofing-attacks/