Microsoft's Bulk Sender Rules Don't Reject You Instantly - They Throttle, Then Quarantine, Then Block

Microsoft rolled out its own bulk sender requirements in May 2025, mirroring the shape of Google and Yahoo's 2024 rules - authentication, a low complaint rate, easy unsubscribe. The requirements look similar on paper. The enforcement mechanism doesn't, and that difference changes what an early warning looks like.

Gmail rejects. Outlook escalates.

Gmail's current enforcement (see our piece on its November 2025 change) is close to binary: compliant mail gets a normal shot at the inbox, non-compliant mail increasingly gets an outright SMTP rejection. Outlook instead runs a graduated, rolling response measured over a 30-day window:

• Stage 1 - Automated throttling: delivery to Outlook slows, with roughly 50-70% of messages delayed rather than rejected
• Stage 2 - Quarantine: messages route to Junk instead of the inbox, cutting realistic inbox placement to roughly 30-50%
• Stage 3 - Blocking: full rejection with a 5xx SMTP response, the same hard-stop Gmail applies from the start

The practical effect: a domain that's drifting out of compliance on Outlook doesn't fail all at once. It looks like inbox placement quietly getting worse over days or weeks - exactly the pattern that gets misread as "reputation is just soft this month" instead of what it usually is, a specific requirement slipping (a DKIM key that expired, an unsubscribe link that broke, a complaint rate that crept past the line).

The requirements themselves

• SPF with a valid, resolvable record - kept under the 10 DNS-lookup limit that trips up records stacked with too many includes
• DKIM signing with a 2048-bit key (1024-bit keys are being phased out and shouldn't be relied on for anything new)
• A DMARC record starting at p=none and, over time, moving toward p=quarantine or p=reject as confidence in the setup grows
• A List-Unsubscribe header on every message, with a working one-click removal - not just a mailto: link buried in a footer
• Complaint rate under 0.3%, and bounce rate under 5%

What this means in practice

If a domain that used to land reliably in Outlook inboxes starts sliding, treat a compliance gap as the first suspect before assuming it's a generic reputation dip - Outlook's own graduated response means the slide itself is often the symptom, not a separate problem. Checking SPF lookup count, DKIM key length and DMARC alignment takes minutes and rules out the most common cause.

Check SPF, DKIM and DMARC for a domain

And because the stages are measured on a rolling 30 days, fixing the underlying issue doesn't bounce you back to Stage 1 immediately - the window has to roll forward past the period that triggered the escalation. Expect the recovery to lag the fix by roughly as long as the problem was live, not to reverse overnight.

Send a real test and see where it lands