Microsoft mail servers 550 5.7.515
Sender authentication
The provider could not verify that the visible sender domain is authorized. SPF, DKIM, and DMARC alignment usually decide whether this clears.
A DMARC pass alone is not sufficient for Microsoft's consumer high-volume requirements.
Decision
Do not retry unchanged. Fix the sender setup first.
Confidence: high. Recipient validity: unknown.
Match this reply
- SMTP stage
- End of DATA
- Endpoint
- Inbound MX
required authentication levelSPFDKIMUse tools
Start here
Confirm the cause
- Check SPF for the visible From domain and make sure it includes the active sending IP or service.
- Check DKIM signing for the message and confirm the signing domain aligns with the visible From domain.
- Check DMARC policy and alignment; if policy is quarantine or reject, make SPF or DKIM pass with alignment before retrying.
App handling
- Treat this as a sender setup incident, not a bad recipient.
- Hold similar mail for the same sender domain or provider until the fix is verified.
- Retry after a fresh single-recipient test succeeds.
Avoid
- Do not retry unchanged in a loop.
- Do not suppress the recipient unless the text explicitly says the mailbox is invalid.
- Do not treat a permanent SMTP code as proof that the address is bad; policy and routing failures can also be permanent.
Common causes
Developer details
Fields to log
Classifier evidence
- Specific cause
- outlook consumer high volume auth requirement
- Evidence
- official+observed