Emails Going to Junk in Outlook and Hotmail: Why, and How to Fix It

Microsoft runs two different mail systems with two different filters, and it helps to know which one is junking you. Outlook.com (which includes Hotmail, Live and MSN addresses) uses a reputation system that is harsh on new senders and generous to anyone the recipient has marked safe. Microsoft 365 business tenants use Exchange Online Protection, where the recipient's administrator sets the rules. The fixes overlap but are not the same. This guide covers both, starting with the published requirements that apply since 2025.

Quick answer

Make SPF, DKIM and DMARC all pass for your domain, keep your sending volume steady, and ask the recipients who matter to add your address to their Safe Senders list, which overrides the filter for them. Enrol your sending domain or IP in Microsoft's SNDS and JMRP programmes so you can see complaints. If mail is bouncing rather than going to junk, that is a block; see the S3150 bounce.

Microsoft's sender requirements

Since May 2025 Outlook.com applies published rules to senders of more than 5,000 messages a day: SPF must pass, DKIM must pass, DMARC must be published with at least p=none and aligned with the From domain, the From and Reply-To addresses must be valid and able to receive replies, marketing mail needs a working unsubscribe link, and bounced addresses must be removed. Mail from non-compliant high-volume senders goes to junk, with rejection to follow. Small senders are not held to the volume rules, but the same records decide whether Outlook.com trusts a message, so publish all three regardless.

Why Outlook.com junks small senders

• No history. A new domain or a domain that has never written to Outlook.com addresses starts with no reputation, and Microsoft's filter treats unknown senders cautiously for the first weeks.
• Missing or failing authentication. Even one failing record (an SPF that does not include the sending server is the usual one) pushes a message toward junk.
• Complaints. A few recipients clicking Junk is enough; Outlook.com weights complaints heavily and per domain.
• Content that looks like a campaign: identical text to many recipients, link shorteners, image-only messages, mismatched link text, a From name that is a slogan rather than a name.
• Shared IP reputation from a web host or an email tool with other customers.

Fix it, in order

1. Send a message to an Outlook.com address you control. Open it, choose View message source (the three dots, View, View message source) and read the authentication (proof that email really comes from your company)-Results header: SPF (Sender Policy Framework — a list of servers allowed to send email as your domain)=pass, DKIM (a digital signature that proves your email was not tampered with)=pass and DMARC (a policy that tells providers what to do if someone fakes your domain)=pass with your domain. Fix any fail first.
2. Publish DMARC if you have not: a TXT at _dmarc with v=DMARC1; p=none; rua=mailto:an address you read. Microsoft sends aggregate reports too.
3. Enrol in SNDS (Smart Network Data Services) at sendersupport.olc.protection.outlook.com to see how Outlook.com views your sending IP, and in JMRP (Junk Mail Reporting Program) to receive a copy of every complaint. If you send through a hosted provider, they hold the IP; ask whether they are enrolled.
4. Ask your regular contacts on Outlook.com to open one of your messages in Junk, mark it Not junk, and add you under Settings, Mail, Junk email, Safe senders. From then on your mail goes to their inbox.
5. Warm up: for a new domain, two weeks of one-to-one replies before any announcement; the warm-up guide has a schedule.
6. Clean the list. Remove every address that bounced and anyone who has not opened in a year. Outlook.com is quick to junk senders who keep writing to dead addresses.

If recipients are on Microsoft 365 (business)

A company mailbox at Microsoft 365 is filtered by Exchange Online Protection under rules the company's administrator sets. The signals above still count, but the recipient cannot override them alone; their admin can add your domain to an allow list or a transport rule. If a whole company is junking you, ask for their IT contact and give them your domain and the message headers. Also check that your DMARC alignment is correct; EOP honours DMARC strictly.

Common questions

Mail reaches Gmail fine but Outlook junks it. Why?

Different reputation data. Outlook.com has seen less of your mail and weights complaints and newness more. The Safe Senders step and a few weeks of steady sending usually close the gap.

Does Outlook.com have a Postmaster Tools equivalent?

SNDS is the closest: it shows the complaint rate and spam-trap hits for an IP. There is no per-domain reputation dashboard like Google's.

How long until it improves?

With authentication fixed and complaints at zero, two to four weeks for most domains. A domain with a history of complaints takes longer and there is no shortcut.

Want to see how your own domain is set up? Use the free SPF checker and DMARC checker: they run in your browser and store nothing.