Outlook.com Rejects Emails From Domains Without DMARC
Microsoft's consumer mail service has started turning away emails from domains without a DMARC record, affecting both bulk and small senders, with a simple TXT record fix available
Outlook.com has begun rejecting emails from domains that do not have a DMARC record, impacting both large and small senders. This change, which was not officially announced by Microsoft, can be resolved by adding a single TXT record with v=DMARC1; p=none to the domain's DNS.
The rejection affects not only bulk senders but also small senders, with some users reporting that even single emails are being rejected. The error message received by senders is 550 5.7.1 Message rejected: Message lacks SPF/DKIM/DMARC Auth Records.
Microsoft had previously announced new rules in 2025 requiring DMARC, SPF, and DKIM compliance for domains sending more than 5,000 emails per day. However, this new rejection policy appears to affect all senders, regardless of the volume of emails sent.
The rejection started on November 5, 2026, and Microsoft has not officially announced the change. To avoid having emails rejected, domains must have compliant SPF, DKIM, and DMARC records.
## What it means The change highlights the importance of email authentication for domains. DMARC, SPF, and DKIM are designed to prevent spam and phishing attacks by verifying the authenticity of emails. With this new policy, Outlook.com is taking a stricter approach to email authentication, which may cause issues for small senders who are not aware of the requirements.
The fact that the rejection can be fixed by adding a simple TXT record suggests that the issue is not with the email content itself, but rather with the domain's authentication records. This change may cause inconvenience for some users, but it is intended to improve the overall security of the email ecosystem.
## Why it matters The rejection of emails from domains without DMARC records has significant implications for businesses and individuals who rely on email communication. With Outlook.com being a widely used email service, this change may affect a large number of users. The fact that small senders are also impacted means that even individuals who send occasional emails may be affected.
It is essential for domain owners to ensure that their DMARC, SPF, and DKIM records are up to date and compliant to avoid having their emails rejected. This change highlights the importance of email authentication and the need for domain owners to take steps to secure their email communications.
