Outlook.com Now Rejecting Email from Domains Without DMARC
Original: Outlook.com Is Quietly Rejecting Email from Domains Without DMARC
Why This Matters
Millions of small businesses emailing personal addresses face silent delivery failures.
Since Nov. 5, 2026, Microsoft's Outlook.com, Hotmail, Live, and MSN have silently rejected some email from domains lacking a DMARC DNS record, with no public announcement from Microsoft. A single TXT record fixes it.
Microsoft's consumer mail service began bouncing a portion of email from domains without a published DMARC record on November 5, 2026 — with no postmaster notice, blog post, or service-health announcement. MailRoute's Thomas Johnson first spotted the rejections in outbound logs that day, with other admins reporting the same issue hours later.
The bounce message reads: '550 5.7.1 Message rejected: Message lacks SPF/DKIM/DMARC Auth Records.' Misleadingly, most of the affected domains had working SPF and many had DKIM configured. The missing piece was the DMARC record that links both to the From address.
This is distinct from Microsoft's existing rule, in effect since May 2025, requiring DMARC for senders exceeding 5,000 messages per day — a threshold that let most small businesses assume they were unaffected. The new behavior hits low-volume senders too: a single reply from a small office can bounce.
The pattern is inconsistent. One message to a Hotmail address goes through; the next bounces; a resend may succeed. That randomness makes it easy to dismiss as a fluke. The fix is a minimal DNS TXT record — 'v=DMARC1; p=none' — which signals DMARC presence without affecting how other mail receivers treat your domain.