---
title: "Microsoft Plans to Impose a Per Day Limit on Exchange Online Bulk Emails to Reduce Spam | DMARC Report"
description: "Microsoft Plans to Impose a Per Day Limit on Exchange Online Bulk Emails to Reduce Spam from DMARC Report explains practical steps for email authentication."
image: "https://dmarcreport.com/og/blog/microsoft-impose-daily-limit-exchange-online-bulk-emails-to-reduce-spam.png"
canonical: "https://dmarcreport.com/blog/microsoft-impose-daily-limit-exchange-online-bulk-emails-to-reduce-spam/"
---

Quick Answer

Email authentication directly impacts deliverability: Google and Yahoo's February 2024 bulk sender requirements enforce SPF + DKIM + DMARC as hard prerequisites for inbox placement. Microsoft followed with DMARC enforcement from May 2025\. Unauthenticated bulk mail is now rejected by all three major providers.

Related: [Free DMARC Checker](/tools/dmarc-checker/) 

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fmicrosoft-impose-daily-limit-exchange-online-bulk-emails-to-reduce-spam%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Microsoft%20Plans%20to%20Impose%20a%20Per%20Day%20Limit%20on%20Exchange%20Online%20Bulk%20Emails%20to%20Reduce%20Spam&url=undefined%2Fblog%2Fmicrosoft-impose-daily-limit-exchange-online-bulk-emails-to-reduce-spam%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fmicrosoft-impose-daily-limit-exchange-online-bulk-emails-to-reduce-spam%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fmicrosoft-impose-daily-limit-exchange-online-bulk-emails-to-reduce-spam%2F&title=Microsoft%20Plans%20to%20Impose%20a%20Per%20Day%20Limit%20on%20Exchange%20Online%20Bulk%20Emails%20to%20Reduce%20Spam "Share on Reddit") [ ](mailto:?subject=Microsoft%20Plans%20to%20Impose%20a%20Per%20Day%20Limit%20on%20Exchange%20Online%20Bulk%20Emails%20to%20Reduce%20Spam&body=Check out this article: undefined%2Fblog%2Fmicrosoft-impose-daily-limit-exchange-online-bulk-emails-to-reduce-spam%2F "Share via Email") 

![Microsoft Plans to Impose a Per Day Limit on Exchange Online Bulk Emails to Reduce Spam](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg) 

![Dmarc check 3768 150x150](https://media.mailhop.org/dmarcreport/images/2024/04/dmarc-check-3768-150x150.jpg) 

Email authentication directly impacts deliverability: Google and Yahoo’s February 2024 bulk sender requirements enforce SPF + DKIM + DMARC as hard prerequisites for inbox placement. Microsoft followed with DMARC enforcement from May 2025\. Unauthenticated bulk mail is now rejected by all three major providers.

> The most common support case we handle is ‘my email is going to spam since the Google changes,’ says Vasile Diaconu, Operations Lead at DuoCircle. Nine times out of ten, the fix is publishing a DMARC record and ensuring SPF/DKIM alignment. It takes 5 minutes once you know what to do.

```
					DMARC Report					

				
```

Microsoft Plans to Impose a Per Day Limit on Exchange Online Bulk Emails to Reduce Spam

```
					<button title="Play" aria-label="Play Episode" aria-pressed="false" class="play-btn">
						
```

Play Episode

```
					</button>
					<button title="Pause" aria-label="Pause Episode" aria-pressed="false" class="pause-btn hide">
						
```

Pause Episode

```
					</button>
				

					<audio preload="none" class="clip clip-12409">
						<source src="https://media.mailhop.org/dmarcreport/images/2024/04/Microsoft-Plans-To-Impose-A-Per-Day-Limit-On-Exchange-Online-Bulk-Emails-To-Reduce-Spam.mp3">
					</audio>
						

							<button class="player-btn player-btn__volume" title="Mute/Unmute">
								
```

Mute/Unmute Episode

```
							</button>
							<button data-skip="-10" class="player-btn player-btn__rwd" title="Rewind 10 seconds">
								
```

Rewind 10 Seconds

```
							</button>
							<button data-speed="1" class="player-btn player-btn__speed" title="Playback Speed" aria-label="Playback Speed">1x</button>
							<button data-skip="30" class="player-btn player-btn__fwd" title="Fast Forward 30 seconds">
								
```

Fast Forward 30 seconds

```
							</button>
						

							<time class="ssp-timer">00:00</time>
							
```

/

```
							<!-- We need actual duration here from the server -->
							<time class="ssp-duration" datetime="PT0H3M19S">3:19</time>
			

								<nav class="player-panels-nav">
												<button class="subscribe-btn" id="subscribe-btn-12409" title="Subscribe">Subscribe</button>
																		<button class="share-btn" id="share-btn-12409" title="Share">Share</button>
										</nav>

						
```

RSS Feed

```
							<input value="https://dmarcreport.com/feed/podcast/dmarc-report" class="input-rss input-rss-12409" title="RSS Feed URL" readonly />
						

						<button class="copy-rss copy-rss-12409" title="Copy RSS Feed URL" aria-label="Copy RSS Feed URL"></button>
					

						Share						
					

						<a href="https://www.facebook.com/sharer/sharer.php?u=https://dmarcreport.com/blog/podcast/microsoft-plans-to-impose-a-per-day-limit-on-exchange-online-bulk-emails-to-reduce-spam/&t=Microsoft Plans to Impose a Per Day Limit on Exchange Online Bulk Emails to Reduce Spam" target="blank" rel="noopener noreferrer" class="share-icon facebook" title="Share on Facebook">
							

						</a>
						<a href="https://twitter.com/intent/tweet?text=https://dmarcreport.com/blog/podcast/microsoft-plans-to-impose-a-per-day-limit-on-exchange-online-bulk-emails-to-reduce-spam/&url=Microsoft Plans to Impose a Per Day Limit on Exchange Online Bulk Emails to Reduce Spam" target="blank" rel="noopener noreferrer" class="share-icon twitter" title="Share on Twitter">
							

						</a>
						<a href="https://media.mailhop.org/dmarcreport/images/2024/04/Microsoft-Plans-To-Impose-A-Per-Day-Limit-On-Exchange-Online-Bulk-Emails-To-Reduce-Spam.mp3" target="blank" rel="noopener noreferrer" class="share-icon download" title="Download" download>
							

						</a>
					

						Link						
					

						<input value="https://dmarcreport.com/blog/podcast/microsoft-plans-to-impose-a-per-day-limit-on-exchange-online-bulk-emails-to-reduce-spam/" class="input-link input-link-12409" title="Episode URL" readonly />
					

					<button class="copy-link copy-link-12409" title="Copy Episode URL" aria-label="Copy Episode URL" readonly=""></button>
					

						Embed						

					
```

/\*! This file is auto-generated \*/ ’ title=“Embed Code” class=“input-embed input-embed-12409” readonly/>

```
					<button class="copy-embed copy-embed-12409" title="Copy Embed Code" aria-label="Copy Embed Code"></button>


```

Starting **January 1, 2025**, [Microsoft Exchange Online](https://www.techtarget.com/searchwindowsserver/definition/Exchange-Online#:~:text=Exchange%20Online%20is%20the%20hosted,on%2Dpremises%20Exchange%20deployments%20provide.) users will have to change their plans as a limit of 2,000 external recipients per 24 hours will be implemented. This is because the platform was never designed for high-volume [transactional emails](https://sendpulse.com/support/glossary/transactional-email). So, this decision has been taken with respect to that and not to overburden the resources.

The limitation will be unfolded in two phases-

- **The First Phase (January 1, 2025):** The primary phase will affect the [cloud-hosted mailboxes](https://www.zdnet.com/article/cloud-based-email-services-everything-you-need-to-know/) of **all newly created tenants**.
- **The Second Phase (July-December 2025):** _The second phase will expand the limit to \*\*all existing cloud-hosted mailboxes_.

## The Recipient Rate Limit

_The daily recipient limit remains at 10,000, which means users can send emails to up to 10,000 recipients within 24 hours_. However, the number of external recipients, those outside your organization , should not exceed 2,000\. For organizations requiring \*\*larger-scale email campaigns beyond this limit, Microsoft suggests switching to [Azure Communication Services](https://learn.microsoft.com/en-us/azure/communication-services/overview) for Email. This service supports high-volume emailing, accommodating millions of emails per month, and is \*\*designed specifically for [bulk communication needs](https://smartmessage.com/blog/customer-journey-and-automation/what-is-bulk-email-marketing-what-is-it-used-for/).

In April 2024, the Department of Homeland Security (DHS) released a report sharing a \*\*big data breach by [Microsoft that culminated in a cyberattack](https://www.cybersecuritydive.com/news/microsoft-exchange-hack-china-preventable/712146/) on its Exchange Online platform in July 2023.

![How to create dmarc record](https://media.mailhop.org/dmarcreport/images/2024/04/how-to-create-dmarc-record-5894.jpg) 

The [Cyber Safety Review Board (CSRB)](https://en.wikipedia.org/wiki/Cyber%5FSafety%5FReview%5FBoard) prepared the report, which \*\*highlighted weaknesses in Microsoft’s security practices and offered recommendations for the company and the [cloud service industry](https://www.channele2e.com/news/private-cloud-services-market-forecasted-to-surge-to-405-billion-by-2033) as a whole.

## How Do You Deploy DMARC As a Personal Effort Towards Email Security?

While [Google, Yahoo](https://dmarcreport.com/blog/google-and-yahoos-new-email-authentication-policy-for-2024/), Microsoft, and other similar platforms are doing their best by rolling out new policies to make \*\*email exchange a safer practice, you, as a domain owner, should also do your bit. Start by implementing [SPF](https://dmarcreport.com/what-is-spf/), DKIM, and [DMARC](https://dmarcreport.com/), as these protocols collectively ensure that only authorized emails sent from your domain land in the inboxes of recipients while also confirming that \*\*nobody tampered with the emails’ contents in transit.

![Dmarc record generator](https://media.mailhop.org/dmarcreport/images/2024/04/dmarc-record-generator-4.jpg) 

DMARC also provides a mechanism for domain owners to receive \*\*feedback reports called [DMARC aggregate and forensic reports](https://dmarcreport.com/dmarc-forensic-report/). These reports basically give insights into how your emails are being perceived by recipients’ mailboxes and if a [threat actor is sending unsolicited emails](https://cybersecuritynews.com/subdomailing-hackers-exploit-brands/) without your consent.

_DMARC is built on SPF and [DKIM](https://dmarcreport.com/what-is-dkim/) by providing a way for domain owners to specify how receiving servers should handle emails that fail authentication_. A domain owner creates a [DMARC policy](https://dmarcreport.com/dmarc-policy/) in the **domain’s DNS settings**, specifying whether to allow, quarantine, or reject emails that [fail SPF](https://dmarcreport.com/blog/what-causes-spf-record-failure-and-how-to-troubleshoot-common-issues/) and/or DKIM checks\*\*. You can also [adjust the percentage of the policy tag](https://www.duocircle.com/dmarc/understanding-dmarc-percentage-tag-for-advancing-policies) by observing the number of false positives and false negatives. _If you receive too many of these reports and are fed up with managing them effectively, then we can help you with this. We will monitor these reports and send you **aggregated versions**_. To know more about our services, [reach out to us](https://dmarcreport.com/contact/). Meanwhile, you can also check out our [resources](https://dmarcreport.com/blog/) to learn more about [email authentication](https://dmarcreport.com/blog/why-email-security-matters-and-how-to-get-it-right/).

## Topics

[ DMARC ](/tags/dmarc/)[ email security ](/tags/email-security/)[ News ](/tags/news/) 

![Vishal Lamba](https://media.mailhop.org/dmarcreport/images/team/vishal-lamba.jpg) 

[ Vishal Lamba ](/authors/vishal-lamba/) 

Content Specialist

Content Specialist at DMARC Report. Writes vendor-specific email authentication guides and troubleshooting walkthroughs.

[LinkedIn Profile →](https://www.linkedin.com/in/vishal-lamba/) 

## Take control of your DMARC reports

Turn raw XML into actionable dashboards. Start free - no credit card required.

[Start Free Trial](https://app.dmarcreport.com/) [Check Your DMARC Record](/tools/dmarc-checker/) 

## Related Articles

[  Foundational 4m  Akira flaunts victims, Idaho targets orthodontist, AI granny protects  Nov 22, 2024 ](/blog/akira-flaunts-victims-idaho-targets-orthodontist-ai-granny-protects/)[  Foundational 4m  Alternatives to DMARCLY's Blog Section for Learning About Email Authentication and DMARC  Nov 6, 2023 ](/blog/alternatives-to-dmarclys-blog-section-for-learning-about-email-authentication-and-dmarc/)[  Foundational 4m  Ambient Light Spying, Cybersecurity Prices Drop, Euro 2024 Threats  Jul 10, 2024 ](/blog/ambient-light-spying-cybersecurity-prices-drop-euro-2024-threats/)[  Foundational 4m  Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested  Jul 18, 2024 ](/blog/banks-drop-otps-major-cyber-heist-spying-spouses-arrested/)

```json
{"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Microsoft Plans to Impose a Per Day Limit on Exchange Online Bulk Emails to Reduce Spam","description":"Microsoft Plans to Impose a Per Day Limit on Exchange Online Bulk Emails to Reduce Spam from DMARC Report explains practical steps for email authentication.","url":"https://dmarcreport.com/blog/microsoft-impose-daily-limit-exchange-online-bulk-emails-to-reduce-spam/","datePublished":"2024-04-20T13:26:24.000Z","dateModified":"2026-04-16T15:53:43.000Z","dateCreated":"2024-04-20T13:26:24.000Z","author":{"@type":"Person","@id":"https://dmarcreport.com/authors/vishal-lamba/#person","name":"Vishal Lamba","url":"https://dmarcreport.com/authors/vishal-lamba/","jobTitle":"Content Specialist","description":"Vishal Lamba writes DMARC Report's how-to guides and vendor-specific configuration walkthroughs. His work focuses on step-by-step implementation guides for major email platforms (Google Workspace, Microsoft 365, SendGrid, Mimecast, Proofpoint, Brevo, and others), troubleshooting common SPF and DMARC errors, and translating RFC-level specifications into practical deployment procedures for IT administrators.","image":"https://media.mailhop.org/dmarcreport/images/team/vishal-lamba.jpg","knowsAbout":["SPF Vendor Configuration","Email Platform Integrations","SPF Troubleshooting","Technical Documentation","Step-by-Step Guides"],"worksFor":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"sameAs":["https://www.linkedin.com/in/vishal-lamba/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://dmarcreport.com/blog/microsoft-impose-daily-limit-exchange-online-bulk-emails-to-reduce-spam/"},"articleSection":"foundational","keywords":"DMARC, email security, News","wordCount":815,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg","caption":"Microsoft Plans to Impose a Per Day Limit on Exchange Online Bulk Emails to Reduce Spam","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://dmarcreport.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://dmarcreport.com/foundational/"},{"@type":"ListItem","position":4,"name":"Microsoft Plans to Impose a Per Day Limit on Exchange Online Bulk Emails to Reduce Spam","item":"https://dmarcreport.com/blog/microsoft-impose-daily-limit-exchange-online-bulk-emails-to-reduce-spam/"}]}
```