---
title: "Microsoft to Enforce DMARC: What to Do Before 5 May 2025"
description: From May 2025, Microsoft will block unauthenticated emails. Find out how to protect your domain, avoid delivery issues and stay ahead of DMARC enforcement.
image: https://blog.grantmcgregor.co.uk/hubfs/Blog%20images/Microsoft_DMARC.png
---
[](https://www.grantmcgregor.co.uk/)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
[Contact Us](https://grantmcgregor.co.uk/contact-us)
[Back to main](https://grantmcgregor.co.uk/knowledge-hub/blog)
Cyber Security
# Microsoft to Enforce DMARC: What to Do Before 5 May 2025
Grant McGregor Team
17 April 2025 • 4 min read
Microsoft has announced new email security rules that could prevent your business emails from being delivered. Or worse, leave your domain wide open to impersonation.
From 5 May 2025, Microsoft will begin enforcing DMARC, along with SPF and DKIM, for any organisation that sends more than 5,000 emails per day to Microsoft's consumer email services - including Outlook.com, Hotmail and Live.com.
These changes mirror similar actions already taken by Google and Yahoo. And like those providers, Microsoft is expected to roll this out to smaller senders next.
### What Happens If You Do Nothing?
If your domain doesn't comply with the new requirements, emails may:
1\. Go straight to junk folders (initially)
2\. Be blocked completely (eventually)
This doesn't just affect your marketing campaigns. 
It can impact:
- Sales outreach
- CRM or billing platform emails
- Password reset links
- Internal communications and calendar invites
- Invoices, quotes and client documents
Even a single outreach campaign or system integration could cross the 5,000 emails/day threshold and trigger enforcement.
If you rely on tools like Mailchimp, ActiveCampaign, HubSpot, or even a just contact form on your website and those emails fail DMARC checks, Microsoft will stop delivering them.
### What Is DMARC And Why Is It Important?
DMARC stands for Domain-based Message Authentication, Reporting & Conformance. It stops scammers and cybercriminals from sending emails that look like they're from your organisation.
It works alongside two other security tools:
- SPF verifies who is allowed to send emails from your domain
- DKIM ensures that the content of the message hasn’t been altered in transit
Without these protections, anyone can send emails that appear to come from your domain - leading to phishing scams, fraud and reputational damage.
Want to learn more about the benefits of DMARC?
[Read: Protect Your Brand: Why DMARC is Essential for Modern Organisations](https://blog.grantmcgregor.co.uk/why-dmarc-is-essential-for-modern-organisations)
### Real-World Risk: The €42m Email Scam
In one of the most high-profile cases of email fraud, an employee at aerospace manufacturer FACC received an email appearing to come from the CEO, asking them to transfer funds for a business deal.
They complied. The email was fake.
- **€42 million** was lost.
- Only **€10 million** was recovered.
- The **CEO and CFO were dismissed**.
- The **hacker was never found**.
DMARC is designed to prevent exactly these kinds of situations from happening.
### It’s Not Just for Big Companies
You don't have to be a large organisation to be at risk.
And you don't have to send thousands of emails every day.
If you send newsletters, use a CRM or run any kind of automated outreach, you could already be close to - or over - Microsoft's 5,000-email threshold. Sometimes one campaign is all it takes.
Even if you're not affected yet, the rules are expanding.
Google, Yahoo and now Microsoft are all enforcing DMARC and smaller senders are likely to follow.
### What You Need To Do Before 5 May 2025
To comply with Microsoft's new policy and stay ahead of Google/Yahoo enforcement: 
- Set up SPF and DKIM records correctly
- Publish a DMARC record (start in "monitor" mode)
- Identify all services that send emails on your behalf (CRMs, billing systems, email marketing tools)
- Monitor reports to see which emails pass or fail
- Transition to a “quarantine” or “reject” policy when ready
### How Grant McGregor Can Help
We make DMARC simple. Our team takes care of everything for you - from setup and testing to validation, reporting and ongoing support.
### 
### Time Is Running Out
The 5 May deadline is fast approaching.
- Enforcement starts at 5,000+ daily emails
- Smaller senders will likely be next
- Microsoft isn’t alone,Google and Yahoo are already enforcing DMARC
Don’t wait until your emails stop delivering or your domain is spoofed. Get protected now.
### Start a Conversation
Call us: 0808 164 4142
Message us: [https://www.grantmcgregor.co.uk/contact-us](https://www.grantmcgregor.co.uk/contact-us)
## Featured posts
Grant McGregor Team
17 April 2025 • 4 min read
## Recent Posts
### Shadow AI: Is Your Business Ready for AI Adoption?
Understand shadow AI's impact on your business. Discover how to assess risks, improve processes, and adopt AI securely w...
[Read More](https://blog.grantmcgregor.co.uk/shadow-ai-is-your-business-ready-for-ai-adoption)
### Our Net Zero Target for 2040: What Can We Change?
From company vehicles and travel to suppliers and technology, see how Grant McGregor is working towards its net zero tar...
[Read More](https://blog.grantmcgregor.co.uk/our-net-zero-target-for-2040-what-can-we-change)
### What Is Penetration Testing? A Guide for Businesses
Learn what penetration testing is, how it works, what the report should include and when your business should consider a...
[Read More](https://blog.grantmcgregor.co.uk/what-is-penetration-testing-a-guide-for-businesses)
### Grant McGregor Recognised as a Leading Global MSP in the 2026 MSP 501
Grant McGregor has been named a Top Global Managed Service Provider in the 2026 MSP 501, ranking #1 Scotland-based MSP a...
[Read More](https://blog.grantmcgregor.co.uk/grant-mcgregor-recognised-as-a-leading-global-msp-in-the-2026-msp-501)
Union
## Empower your business with secure, expert-led solutions.
Talk to us about people-focused technology that drives results.
[Start a conversation](https://grantmcgregor.co.uk/contact-us)
Premium IT Services Tailored for Leading Brands
[Follow us on LinkedIn](https://www.linkedin.com/company/grant-mcgregor-ltd/) [Follow us on Facebook](https://www.youtube.com/itgrantmcgregor) [Follow us on Facebook](https://www.facebook.com/grantmcgregorltd/) [Follow us on Twitter](https://x.com/GrantMcGregorIT)
Quick Links
- [Home](https://grantmcgregor.co.uk)
- [About us](https://grantmcgregor.co.uk/about-us/our-story)
- [Knowledge Hub](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
Services
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
Edinburgh – Chesterfield
[0131 603 7910](tel:+441316037910)
[info@grantmcgregor.co.uk](mailto:info@grantmcgregor.co.uk)
**Main Office:**
The Merchants' Hall,
22 Hanover St,
Edinburgh EH2 2EP
© 2026
Grant McGregor. All rights reserved.
[Privacy and Cookie Policy](https://blog.grantmcgregor.co.uk/hubfs/UsefulDownloads/Policies/GRMC-SEC-Privacy-and-Cookie-Policy.pdf)
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Grant McGregor Team",
"url" : "https://blog.grantmcgregor.co.uk/author/grmc-team"
},
"dateModified" : "2025-07-01T12:34:48.336Z",
"datePublished" : "2025-04-17T15:39:00.000Z",
"headline" : "Microsoft to Enforce DMARC: What to Do Before 5 May 2025",
"image" : [ "https://blog.grantmcgregor.co.uk/hubfs/Blog%20images/Microsoft_DMARC.png" ],
"mainEntityOfPage" : {
"@id" : "https://blog.grantmcgregor.co.uk/microsoft-to-enforce-dmarc-what-to-do-before-5-may-2025",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg"
},
"name" : "Grant McGregor"
}
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://grantmcgregor.co.uk/",
"@type" : "LocalBusiness",
"address" : {
"@type" : "PostalAddress",
"addressCountry" : "GB",
"addressLocality" : "Edinburgh",
"postalCode" : "EH2 2EP",
"streetAddress" : "22 Hanover Street"
},
"geo" : {
"@type" : "GeoCoordinates",
"latitude" : 55.9526313,
"longitude" : -3.1970679
},
"image" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg",
"name" : "Grant McGregor",
"openingHoursSpecification" : {
"@type" : "OpeningHoursSpecification",
"closes" : "18:00",
"dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ],
"opens" : "08:00"
},
"sameAs" : [ "https://www.facebook.com/grantmcgregorltd/", "https://x.com/GrantMcGregorIT", "https://www.youtube.com/itgrantmcgregor", "https://www.linkedin.com/company/grant-mcgregor-ltd/" ],
"telephone" : "+441316037910",
"url" : "https://grantmcgregor.co.uk/"
}
```