email rejecting safe sender

Travis Desilets 0 Reputation points
2026-11-09T04:35:23.1733333+00:00

AS9031519 is the code my safe senders are receiving when they try and email me

Outlook | Web | Outlook.com | Email
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. EmilyS726 279.2K Reputation points Independent Advisor
    2026-11-09T05:11:02.0266667+00:00

    Hello

    I am seeing a sudden increase in similar reports from other users in this forum as well.

    Unfortunately, I cannot find any official information from Microsoft acknowledging this issue. Microsoft's published requirements for SPF, DKIM, and DMARC apply to senders sending more than 5,000 emails per day. However, based on the sudden increase in reports from the last few days, I suspect these requirements may now be affecting low-volume senders as well. This is just my observation, not something Microsoft has officially confirmed.

    I helped several users with this issue the last few days in this forum. One interesting thing we noticed is that email headers may show DMARC as passing, even when the sending domain does not have a published DMARC record. We were able to identify this by checking the domain using a free tool such as https://mxtoolbox.com/.

    In some cases, once the missing DMARC record was properly configured and verified, emails started coming through again.

    For this reason, I strongly recommend having your senders check their SPF, DKIM, and DMARC records for the affected sending domains. This is not an issue you can fix on your end. It has to be addressed on the sender's end.

    If you need help checking these records, I am happy to do so. I would just need to know the sending domain name. You do not need to share the full email address.

    Also, news article about this issue: https://www.neowin.net/news/microsoft-outlook-spf-validation-error-blocks-email-sending-and-receiving/

    Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-11-09T04:36:08.5966667+00:00

    AS9031519 is a server-level rejection that Safe Senders cannot override; each affected sender must give the complete non-delivery report to their email provider or domain administrator for investigation of the sending domain’s SPF, DKIM, and DMARC authentication.

    The rejection occurs while the sending server is handing the message to Microsoft, before it reaches your Outlook.com mailbox. Safe Senders only affects messages that Outlook.com has already accepted, so adding the address again will not resolve this case.^1^

    What to do

    1. Ask one affected sender for the complete bounce message, also called the non-delivery report (NDR). It should include:
      • The SMTP status, such as 550 5.7.x
      • All text immediately before and after AS9031519
      • The Microsoft server name, timestamp, and diagnostic details
    2. Have the sender forward that report to their email administrator or provider. The administrator should check:
      • SPF authorizes the server that transmitted the message.
      • DKIM signing is enabled and validates.
      • DMARC exists and aligns with the domain shown in the message’s From address.
      For example, an SPF failure means the transmitting server was not authorized by the sender domain’s SPF DNS record; that must be corrected by the sender or its provider.^2^
    3. After the sender corrects the authentication or sending-server problem, have them send a new test message. The previous rejected message will not appear automatically.

    Your personal @outlook.com address does not need SPF, DKIM, or DMARC records configured by you—Microsoft manages the Outlook.com domain. The authentication details in this rejection concern the sender’s domain.^3^

    If the sender says authentication passes

    The sender or their mail administrator should use Microsoft’s Outlook.com Sender Support guidance to examine sending-IP reputation, reverse DNS, and other server-side delivery requirements. Microsoft also provides an issue-submission route there for compliant senders whose messages remain blocked.^4^

    If unrelated senders are all affected

    If messages from several unrelated providers or domains produce the same rejection:

    1. Sign in to Outlook.com.
    2. Select Help from the top menu.
    3. Search for the issue.
    4. At the bottom of the Help pane, under Still need help?, select Yes.
    5. Include complete NDRs from two or more affected senders, including timestamps and SMTP codes.^5^

    Do not post the complete reports publicly without removing email addresses, message IDs, and other identifying information.

    References

    1. People who send me email are getting blocked saying they aren't from a ...
    2. Not receiving most emails all of a sudden - Microsoft Q&A
    3. Incoming emails being blocked due to lack of SPF/DKIM/DMARC records on my @outlook.com account - Microsoft Q&A
    4. Sender Support in Outlook.com | Microsoft Support
    5. How to get support for Outlook.com | Microsoft Support
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.