This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 90%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
About 50% of my clients that have emailed me since yesterday are getting the message 550 5.7.1 Message rejected: Message lacks SPF/DKIM/DMARC Auth Records (AS9031519) [TY2PEPF0000AB8A.apcprd03.prod.outlook.com 2026-11-06T19:53:27.630Z 08DF3B738DE5D0FD].
I see others are also having this issue. Is this a Microsoft issue? I have a difficult time believing that all of my clients using different emails are all having issues with their email so it appears it is an issue with Microsoft.
Sending, receiving, and organizing email in Outlook.com
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 24%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFL%3C/text%3E%3C/svg%3E)
Fixed: “550 5.7.1 Message lacks SPF/DKIM/DMARC Auth Records (AS9031519)”, M365 → Hotmail/Outlook.com
Mail from my M365 tenant to Hotmail bounced with “SPF validation error” (5.7.23). That headline is misleading: my SPF and DKIM were both fine. The real problem was the detail line saying the message lacked SPF/DKIM/DMARC auth records. Even though Microsoft’s own outbound headers said dmarc=pass, MXToolbox showed I had no DMARC record. M365 never creates one.
Fix: add a TXT record at your DNS host:
_dmarcv=DMARC1; p=none; rua=mailto:******@yourdomain.comIf your DNS is hosted by Microsoft, it goes under Admin center → Settings → Domains → [domain] → DNS records. Otherwise, add it wherever your DNS lives, such as GoDaddy, Cloudflare or your web host. Hotmail accepted my mail once the record showed up on MXToolbox.
Check your other domains too with dmarc: and spf: lookups on mxtoolbox.com. On a second domain I found duplicate DMARC records and an SPF syntax error, and either one breaks authentication.
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 62%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Same issue. Multiple senders affected. Replicated it myself from a work email that uses Google Workspace.
Might finally be the reason to abandon Microsoft and Outlook permanently.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 68%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYA%3C/text%3E%3C/svg%3E)
I saw this issue Thurday 5/11/2026 night AEST only sending to Outlook.com/.au and Hotmail.com domains.
All have valid SPF and DKIM records, domains show healthy in M365 Admin centre.
The temp fix i found was adding a _dmarc record to the domain dns records.
do we know what has changed and why this is now an issue?
It would be nice to know some more information so i can go back to my unhappy clients to why things have changed. I have looked and cannot find anything from microsoft saying there is a change coming through that i have seen, but not saying it is not there.