How can I stop Microsoft from blocking some emails coming into my account starting sometime in May 2025?

Bill Childress 20 Reputation points
2025-09-04T21:20:26.55+00:00

Starting in May 2025, Microsoft began to block some emails sent to my email address, such as Square purchase receipts and appointments set up through book.squareup.com. Other emails are blocked at random, such as when I signed up for a webinar today, and the email confirmation never showed up. I re-registered using a Gmail account, and I had no problem receiving the email confirmation. These blocked emails no longer reach either my Inbox or my Junk Email folder. I have no entries in my blocked senders list. I have added both the emails and their domains to the Safe Senders list, but they are still not getting through (they seem to be blocked by Microsoft before reaching the point where my email account settings would filter them). How can I revert to receiving all emails sent to me?

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments No comments

Answer accepted by question author
EmilyS726 258.1K Reputation points Independent Advisor
2025-09-04T21:58:28.3866667+00:00

Hello,

Starting May this year, Microsoft started mandating the configuration of SPF, DKIM and DMARC for high volume senders. See the blog post here: https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/strengthening-email-ecosystem-outlook%E2%80%99s-new-requirements-for-high%E2%80%90volume-senders/4399730

These days, many businesses don’t send emails directly from the company that hosts their domain. Instead, they often use third-party services to send email on their behalf. For example, they might use Constant Contact to send newsletters, Square to send receipt and booking confirmation, or Salesforce to send customer service emails. If a company registers its domain (e.g., business.com) with Provider A but uses Provider B to send email on behalf of @business.com, then the company must add Provider B’s SPF, DKIM, and DMARC records into its DNS at Provider A. This ensures that when Provider B sends mail, the messages pass authentication checks and are not flagged as spoofed spam. Since May of this year, Microsoft has been enforcing strict SPF, DKIM, and DMARC checks for high-volume senders. If senders fail to configure these records properly, Microsoft may reject their incoming emails. In short, this issue must be fixed on the sender’s side, not Microsoft’s. Not all email service providers are mandating this as of today, and not all businesses are completely compliant with this requirement either.

If your gmail works fine for now, it is probably more practical to use your gmail for these use cases until more and more businesses are caught up with their SPF, DKIM and DMARC compliance. As of a matter of fact, more and more email service providers are moving to the direction of requiring these, simply because spoofing is a real threat and is getting more and more common, so there's no looking back unfortunately.

Was this answer helpful?

1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. DANIEL WIMMER 0 Reputation points
    2026-06-23T08:08:54.5333333+00:00

    Are you kidding me, Microsoft? My insta account got hacked, and because of your "measures" to enforce compliance I cannot receive any mails from instagram, and thus not able to reset my password and secure my account. Been trying for over a month now and haven't been that frustrated with IT solutions/SaaS for a long time.

    I can't imagine a company like instagram/Meta is not at the forefront of domain/sender integrity, and you would have gotten a lot of trouble if you were messing with their emails at scale.

    Having said that, I am a paying customer and I really expect that the password reset e-mails are getting to me. It works flawlessly with gmail, for example. But I can't use gmail to reset an account that's tied to my outlook address, I am sure you can understand that.

    And before you go into L1 troubleshooting mode now - I whitelisted every possible domain from instagram, checked they are not on the block list. No forwarding, no rules, nothing in Spam. Instagram tells me they send the e-mail to ***@outlook.de but it never makes it into my inbox.

    PLEASE HELP!

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.