How does Outlook's Junk Email filter work?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
If your emails are landing in Outlook's junk folder and you're not sure why, here's what's actually happening behind the scenes and what you can do about it.
Outlook's junk filtering runs on a system called SmartScreen. It's Microsoft's machine learning engine, and it evaluates every inbound message across a handful of signals before deciding where it lands. The checks happen in a specific order, and reputation screening comes first.
Sender reputation is the real gate. Before SmartScreen ever reads your content, it looks up your sending IP and domain against Microsoft's own reputation databases. A fresh domain or IP with no history gets treated with suspicion by default. That's not a bug. It's by design. New senders don't have a track record yet, so Outlook holds them at arm's length until they've earned trust through consistent, low-complaint sending.
Authentication is checked next. SmartScreen verifies your SPF, DKIM, and DMARC records. Failing any of these raises your spam probability significantly. Microsoft has been tightening authentication requirements over time, and unauthenticated email from a new domain is almost guaranteed to hit junk. This is the one area where you have direct, immediate control before you send a single message.
Content scanning happens after reputation and auth. SmartScreen looks for spam patterns, suspicious links, and formatting characteristics that match known junk mail. Things like all-caps subject lines, spammy phrases, and heavy image-to-text ratios all add to your score. If your reputation and authentication are clean, content issues become the tiebreaker.
User signals shape the model over time. When Outlook users mark messages as junk, that data feeds back into SmartScreen. If enough people report a sender, it affects filtering for the entire network. This is why complaint rates matter so much. One bad campaign can trail you for weeks.
Individual users can override all of this. Each Outlook account has its own safe senders and blocked senders lists. A recipient who adds you to their safe list will always get your emails, regardless of what SmartScreen thinks. Encouraging engaged readers to add your address to their contacts genuinely helps (it's one of those green flags that works).
If you're sending from a new domain, the practical order of operations is this. First, get your authentication records in place before your first send. Second, warm up your sending volume gradually. Third, monitor your complaint rates and pull back if they spike. Trying to fix content issues while your reputation is still underwater won't move the needle much.
Not sure if your current setup would pass Outlook's checks? You can run a free SPF check and DKIM lookup right now to spot anything broken before it becomes a deliverability problem.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.
