Since 5 November, Outlook.com has been silently rejecting emails from domains without a DMARC record — even tiny senders. Here's the one-line fix and how to check if you're affected.
If you email customers who use Outlook.com, Hotmail, Live or MSN addresses, some of your messages may already be disappearing — and you probably haven't noticed, because the sender never gets a clear warning and the recipient just never sees the mail arrive.
Since 5 November 2026, the email delivery service MailRoute has been logging a sharp rise in bounced messages to these Microsoft consumer mail platforms. The common thread: none of the affected sending domains have a DMARC record published, even when their SPF and DKIM settings are correctly configured. Heise.de reported on the issue, confirming that genuine, legitimate emails are failing to arrive simply because of a missing DNS entry.
Why this is catching small businesses off guard
Microsoft's own published policy, in place since May 2025, stated that DMARC was only required for domains sending more than 5,000 messages a day to Outlook.com. Most Swiss SMEs send far fewer emails than that and reasonably assumed the rule simply didn't apply to them, as MailRoute's analysis explains. Yet the current rejections are hitting small senders too, and Microsoft did not announce this change in advance.
On 9 November, a Microsoft moderator confirmed in a support Q&A thread that there is an ongoing Exchange service issue affecting mail delivery to Outlook.com, Hotmail and Live addresses, and that it is classified as a service degradation still under investigation, according to LazyAdmin's reporting. In plain terms: this isn't a rare edge case, it's an active, unresolved issue right now.
Why you might not even know it's happening
The cruelest part of this problem is its silence. Only a portion of messages from an affected domain get rejected — not all of them. That means:
- Some customer order confirmations, invoices or appointment reminders simply vanish
- You don't get a clear, consistent bounce notification every time
- The recipient has no idea an email was ever sent to them
- You may only discover the problem when a customer calls asking "where's my invoice?"
For a Swiss SME that relies on email for booking confirmations, quotes, reminders or support replies, this can quietly damage customer trust and cash flow before anyone realises what's wrong.
What to do today
The fix itself is simple and takes minutes once you know where to make it. You need to publish a DNS TXT record at _dmarc.yourdomain.com with the value:
v=DMARC1; p=none
This is the most basic DMARC policy possible — it tells receiving mail servers "I'm monitoring, but take no special action yet." It does not change how your email is handled or delivered in any other way, but according to MailRoute's findings, publishing it is enough to stop the current rejections. A few practical steps:
- Check whether your domain already has a DMARC record (ask your IT provider or use any free online DMARC checker)
- If not, add the TXT record above through your domain registrar or DNS provider
- Confirm your SPF and DKIM records are also correctly set up, since DMARC builds on both
- Monitor delivery to Outlook.com/Hotmail/Live addresses over the next few days to confirm bounces have stopped
- Once comfortable, consider tightening the policy later (e.g. p=quarantine) for stronger protection against spoofing
The bigger picture
This is yet another example of how an unannounced change on a major platform can quietly break something fundamental to daily business operations — customer communication — without any obvious alarm bells. It's exactly the kind of technical blind spot that keeps appearing in the threat landscape we track every week: not always a dramatic hack, sometimes just a missing DNS record with real business consequences.
If you're not sure whether your domain is protected, or you simply don't have time to chase down DNS settings between running your business, this is precisely the kind of quick, practical check that a local IT partner should be handling for you. TMC (The Mejlerö Company GmbH) in Engelberg supports SMEs across Obwalden, Nidwalden, Lucerne and Zurich with exactly this sort of everyday IT housekeeping — alongside broader Microsoft 365 administration, security basics and automating routine IT tasks so nothing falls through the cracks. A free network analysis and a free one-hour consultation are available if you want a second set of eyes on your setup.
We'll keep watching this space and reporting on what Swiss business owners need to act on now.