Sending, receiving, and organizing email in Outlook.com
For an Outlook.com / Hotmail address, SPF, DKIM, and DMARC records for the outlook.com domain are managed by Microsoft. There is no mailbox setting where those records can be added or changed.
This error usually means the sender’s domain failed the required authentication checks, not that the Outlook.com recipient account is missing a DMARC setting.
What to do:
- Ask the sender for the full bounce message (NDR). The error details identify which sending domain failed authentication.
- If the failed messages come from only one company or domain, contact that sender and ask their email administrator to check the domain’s SPF, DKIM, and DMARC configuration.
- If the failed messages come from multiple unrelated senders, collect the full error messages from those senders and contact Outlook.com Support through Help > Still need help? while signed in.
- Do not expect Safe senders to fix this specific issue. Messages can be rejected before they ever reach the mailbox.
Why this happens:
- Outlook.com enforces stricter authentication requirements for high-volume senders.
- After a sender reaches 5,000 or more messages to Microsoft consumer email services from the same domain, Microsoft expects:
- SPF and DKIM to be published and pass
- a DMARC record to be published
- the message to pass DMARC alignment/validation
If the blocked sender is using a custom domain, their mail admin needs to correct the sending domain’s authentication records. If the sender is using a personal @outlook.com address, those DNS records are still not something the recipient can configure.
References:
- Fix NDR error "550 5.7.515" in Outlook.com | Microsoft Support
- Incoming emails being blocked due to lack of SPF/DKIM/DMARC records on my @outlook.com account - Microsoft Q&A
- Why am I not receiving emails from certain senders that I haven't blocked? - Microsoft Q&A
- Blocked Email Responses - Microsoft Q&A