Phishing email from my domain is still coming through even though DMARC policy is set to "reject"

Hello everyone,
This morning I got a "phishing" email from my domain to a catch all email address that I've got set up. But what concerns me is that the email came within my domain (support@mydomain.com) How is that possible with the DMARC policy set to reject for over a year now?
Here's the email that I received: https://i.postimg.cc/tCVh4YdL/Screenshot-2023-09-03-at-10-14-22-AM.png
Here's the DMARC policy that's set up: https://i.postimg.cc/G9w2g35f/Screenshot-2023-09-03-at-10-49-18-AM.png
Do I have to look at the email's raw message to figure out …

address coming cybersecurity dmarc domain email hello phishing policy reject support