How Outlook treats a solo ad you buy
Answer Outlook grades a solo ad on its own rules. Consumer Outlook rejects a lot of unauthenticated bulk mail. Business mailboxes can tag bulk mail as Promotions even when complaints are quiet. And since July 22, 2026, Microsoft's SNDS no longer shows spam-trap hit counts, so a seller cannot wave that report as proof.
The note that started this: Email Deliverability News 2026: What Changed and When, Andrian Valeanu, Unspam, August 20, 2026, updated September 23, 2026.
The page that started this is Unspam's 2026 deliverability news file, written by Andrian Valeanu on August 20 and updated September 23. It is a dated log, which is what you want when a vendor says Outlook is fine. Fine as of which Tuesday. The log is specific. Use it when a comparison of the best solo ad vendors is really a comparison of whose mail still arrives at Hotmail.
What changed in Microsoft SNDS on July 22, 2026?
Unspam reports that Microsoft SNDS stopped reporting spam-trap hit counts on July 22, 2026, which removed the last first-party trap signal a sender could read.
SNDS is Microsoft's postmaster view for senders. For years a careful operator opened it to see whether their mail had hit traps, the addresses that exist to catch people mailing lists they should not have. Unspam says that count stopped on July 22, 2026. Earlier in the same season, from December 4, 2025, SNDS had already required authentication to approve network access and had cut complaint samples down. The trap number was the last clean signal from Microsoft itself.
If a solo seller still emails you a trap-hit screenshot as current proof, look at the date in the corner. A picture from June is a picture from June. It does not describe October. Ask what they watch now: bounces, complaint mail from recipients, and the unsubscribe rate on the days they mail your kind of offer. A seller who has replaced the missing report with a habit is operable. A seller who has replaced it with a shrug is selling you memory.
How does Outlook.com treat unauthenticated bulk mail?
Unspam writes that domains sending more than 5,000 messages a day to Outlook.com, Hotmail, Live, and other Microsoft consumer addresses must pass SPF, DKIM, and DMARC, and that since May 5, 2025 the documented failure is a rejection, 550 5.7.515.
Read the scope. Consumer mailboxes. A business address on Microsoft 365 is a different system, covered below. For the consumer side, Microsoft's bar is strict in a way Gmail's is not. Unspam says Microsoft expects SPF and DKIM to pass on their own, which is tighter than DMARC's usual rule that one aligned pass can be enough. A domain that "passes DMARC" in a sloppy setup can still fail Outlook if one of those two is broken.
There is a scar in the log worth knowing so you do not misread a bad week. In late February 2026, Unspam says practitioners saw Outlook.com rate-limit and reject mail from long-standing authenticated senders, with temporary 451 4.7.650 errors and some 550s. The reported wave peaked on February 24 and 25 and had largely cleared by February 26. Authentication was necessary. It was sometimes insufficient. The sellers who lost the least noticed within hours. Put that in your quote as a pause right: if the send day throws a spike of 550s or 451s, the seller stops, tells you, and you decide whether the remainder goes tomorrow.
What does the Promotions tag mean for a solo ad to a work address?
Unspam says that as of July 2026 Microsoft tags every message Exchange Online identifies as bulk, regardless of complaint level, and that moving that mail into a Promotions folder is a separate setting that ships turned off.
This is the line solo buyers mix up. A tag is a label. A folder move is a separate switch, and Unspam says that switch ships off in Microsoft's default security presets. So a solo ad to a work inbox may wear a Promotions tag and still sit in the inbox, unless that company turned the folder on. Three escapes exist in their account: the recipient has the sender in Safe Senders, the sender is inside the company's own domain, or an admin suppresses the stamp. You will not be in Safe Senders. You will not be their domain. Assume the tag.
The practical read for a buyer: if the seller's list is full of role addresses and company domains, your mail may be labeled bulk the moment it is recognized as bulk. That is a placement fact, separate from whether anyone complained. Ask what share of the file is consumer Outlook versus work mail. Price them as different products if the seller will split them. If the seller will not split them, you are buying a blend and you should say so in your own notes after the click report lands.
Unspam also logs a September 14, 2026 tightening inside Exchange Online. Trial tenants dropped from 5,000 to 500 external recipients a day. A young tenant gets a fraction of its normal quota. None of that is your problem unless the seller is mailing your solo from a fresh Microsoft tenant, which is a bad idea they should not need you to explain. Microsoft, in Unspam's telling, has been plain that Exchange Online is a poor home for bulk mail. A seller running campaigns out of a company tenant is borrowing a pipe that was built for a different job.
What else on that page should change the quote?
Across senders Unspam tested in 2026, 52 percent still had no DMARC record, and 14 percent passed the one-click List-Unsubscribe check. RFC 9989, published in May 2026, drops the old pct tag, so a record that says reject 25 percent of failures can be read as reject all of them.
Those two percentages are Unspam's tests, not a census of the internet. They are still the right size of warning. Half the domains they looked at had not published DMARC at all. About six in seven failed the one-click unsubscribe check. A solo seller who has both is ahead of that sample, and can show you. Ask them to.
The pct detail is a DNS foot-gun. Under the older DMARC document, p=reject; pct=25 rejected a quarter of failing mail. Unspam says a receiver that follows RFC 9989 ignores pct and rejects all failing mail. Google, Yahoo, and Microsoft had not publicly committed to the new reading by the September update, so both readings are live. If your seller's record still carries pct, ask them to stop using it as a safety blanket. It may no longer be one.
The buyer move today is short. Get the mailbox mix. Get the authentication in a sentence you can check. Get a written pause if Outlook starts refusing the send. The seller move is the same list, done before the buyer has to ask. That is what safe solo ads sellers look like when the mailbox on the other end is Microsoft's.