About SPF checks

SPF (Sender Policy Framework) is an email authentication standard that helps protect email senders and recipients from spam, spoofing, and phishing. By adding an SPF record to your Domain Name System (DNS), you can provide a public list of senders that are approved to send email from your domain.

An SPF record prevents sender address forgery by protecting the envelope sender address (and also on our side the sender address), allowing the domain administrator to specify which mail servers are allowed to send mail from their domain.

Why it's important:

  • Spammers can spoof your domain name to spam other networks, harming your brand’s reputation.

  • Attackers can spoof your domain name for phishing and whaling attacks, potentially leading to ransomware, malware, and financial loss or fraud.

  • Other email servers on the internet may reject your email because they can’t determine its legitimacy.

Note: Before you configure a "Report Message" button, make sure that your domain has an SPF record defined. For details, see Configuring a Microsoft 365 "Report Message" button.