Posted At: Mar 25, 2026 - 725 Views

Outlook.com Tightens Its Sender Rules: What Online Merchants Need to Check

After Gmail and Yahoo, Microsoft has also tightened its requirements for high-volume senders. Since May 5, 2025, domains sending more than 5,000 emails per day to Outlook.com must comply with SPF, DKIM and DMARC. Non-compliant messages may be sent to the Junk folder and, if the problem persists, rejected with the SMTP error 550 5.7.515.

For Shopify and PrestaShop stores that send marketing campaigns, order confirmations or abandoned cart reminders, this change has a direct impact.


Who Do These New Rules Apply To?

These requirements apply to all domains sending more than 5,000 emails per day to Outlook.com. The announcement covers the consumer service that handles outlook.com, hotmail.com and live.com addresses.

Microsoft nevertheless recommends that all senders, whatever their volume, set up SPF, DKIM and DMARC as a general best practice.


What Microsoft Actually Requires

For high-volume senders, Microsoft requires:

  • SPF configured for the sending domain, with the authorized IP addresses and hosts listed precisely
  • DKIM to validate message integrity and authenticity
  • DMARC configured with at least a p=none policy, aligned with SPF or DKIM — preferably both

Non-compliant messages receive the SMTP error 550 5.7.515 Access denied, sending domain does not meet the required authentication level. Depending on the level of non-compliance and the state of the sending domain, Microsoft may first route messages to the Junk folder, then reject them if the problem persists.

On top of these technical requirements, Microsoft recommends that high-volume senders use a valid From address that reflects the real sending domain, provide a clear unsubscribe link in marketing emails, configure a valid reverse DNS, and maintain rigorous list hygiene by regularly removing invalid addresses to reduce bounces and spam complaints.


How It Differs From Gmail

Gmail and Outlook are converging on the same basic requirements (SPF, DKIM, DMARC), with a few nuances:

  • Gmail recommends staying below a 0.10% spam rate and requires one-click unsubscribe for bulk senders
  • Outlook doesn't explicitly require one-click unsubscribe in the RFC 8058 sense, but does require a visible, working unsubscribe link in marketing emails
  • Gmail and Outlook agree on one essential point: a clean list, with bounce management and regular removal of invalid addresses, is part of the expected best practices

Why the Quality of Your Email List Plays a Direct Role

Perfect technical authentication (SPF, DKIM, DMARC) isn't enough if your contact list contains invalid addresses, disposable emails or abandoned addresses. These contacts generate bounces and complaints that damage your sender reputation — and can trigger filtering or blocking by Microsoft, regardless of your technical compliance.

That's exactly what GTMailHygiene for Shopify and MailHygiene PRO for PrestaShop fix: they identify invalid, disposable or risky addresses in your list before they hurt your deliverability. If you have a CSV file to check before importing it, GTMail-Verif does it directly online.


What You Need to Check Now

  1. Does your domain have SPF, DKIM and DMARC? → You can check on MXToolbox
  2. Is your DMARC aligned with SPF or DKIM? → A minimum of p=none is required, and alignment is essential
  3. Do your marketing emails have a visible unsubscribe link? → Mandatory for high-volume sending
  4. Does your list contain invalid or abandoned addresses? → Clean it with GTMailHygiene, MailHygiene PRO or GTMail-Verif

The Bottom Line

Gmail, Yahoo and now Outlook — the three major consumer email providers have all tightened their rules in less than two years. For an online merchant, the impact is concrete: emails rejected before they even arrive, missed orders, a damaged domain reputation.

Check your technical compliance and clean your contact list before your next campaign.


Further reading:


Sources: