outlook is blocking my wifes email address

The administrator or email provider for your wife’s domain must correct its SPF, DKIM, and DMARC configuration because Outlook is rejecting the message during authentication, before it reaches your mailbox.

What to do

1. Have your wife open the complete delivery-failure message, also called an NDR or bounce message.
2. Send that complete report to whoever manages her business email—for example, her workplace IT administrator, website/email hosting company, or domain provider.
3. Ask that administrator to check:
   • SPF: Every service and server legitimately sending mail for the domain must be authorized in its SPF DNS record.
   • DKIM: Outgoing messages must be correctly signed, and the matching DKIM public-key records must exist in DNS.
   • DMARC alignment: At least SPF or DKIM must pass and align with the domain shown in the message’s From address.

Microsoft identifies these authentication failures as a sender-side responsibility. The sender’s administrator should correct SPF/DKIM and confirm DMARC alignment.^1^ If multiple checks fail, Microsoft recommends fixing SPF first, DKIM second, and then verifying DMARC alignment.^2^

After the administrator makes the changes, have your wife send a new test message. DNS changes may not be recognized immediately by every mail server.

Why Outlook’s sender lists will not fix this rejection

This is different from manually blocking her address in Outlook. A blocked-sender entry normally sends delivered messages to Junk Email; an authentication rejection occurs before Outlook places the message in your mailbox. Adding the address to Safe senders and domains is therefore unlikely to override this particular rejection.^3^

You can still check that there is no separate local block:

1. In Outlook.com, select Settings.
2. Go to Mail → Junk email.
3. Under Blocked senders and domains, remove her address or domain if listed.
4. Under Safe senders and domains, select Add safe sender, enter her address, select OK, and then Save.^4^^5^

Treat that only as a blocked-list check—not as the solution to the SPF/DKIM/DMARC error.

Temporary and escalation options

• Until the domain authentication is repaired, your wife can send from another correctly authenticated email account.
• If Outlook rejects messages from several unrelated domains, collect each complete NDR and contact Outlook.com Support while signed in through Help → Still need help?^3^

References

1. Security Operations guide for email authentication in Microsoft 365
2. Troubleshoot email authentication in Microsoft 365
3. Incoming emails being blocked due to lack of SPF/DKIM/DMARC records on my @outlook.com account - Microsoft Q&A
4. [Classic Outlook](https://support.microsoft.com/outlook/mail/block-or-unblock-senders-in-outlook)
5. [Outlook on the web](https://support.microsoft.com/outlook/mail/add-recipients-to-the-safe-senders-list-in-outlook)