Our Email Is Moving to anchorpoint.coop

On Tuesday, Nov. 10, 2026, email from AnchorPoint Credit Union Association moves to anchorpoint.coop. The change covers every staff address and the newsletters and announcements we send through HubSpot. A few minutes of setup now keeps our messages out of your junk folder.

• Only the Ending ChangesThe part before the @ stays the same. Mississippi addresses ending in @mscua.com move to @anchorpoint.coop too.
• Old Addresses Still Reach UsMail sent to @yourleague.org and @mscua.com addresses will reach us for at least a year.
• Your Subscriptions StayYou don’t need to sign up again. Your newsletter choices carry over.

What everyone should do For IT teams Watch for impostors Questions

What Everyone Should Do

For anyone at your credit union who gets email from us.

1. Add the staff you work with to your contacts

   Save the @anchorpoint.coop address of each staff member you work with, plus news@anchorpoint.coop for our newsletters. Most email filters trust the people in your contacts. Replace any @yourleague.org or @mscua.com entries for us, and check distribution lists, forwarding rules, and saved recipients that include us. Old addresses keep working, so nothing breaks if you miss one.

2. Check your junk folder after Nov. 10

   If a message you expected from us lands in junk or spam, make sure the address ends exactly in @anchorpoint.coop, then mark it Not junk (Outlook) or Not spam (Gmail). Each one teaches your filter that you want our mail. Don’t rescue a message you weren’t expecting; call us instead.

3. Send this page to your IT team

   Your IT team can allow our domain for everyone at your credit union, with checks that keep impostors out. We don’t ask you to add our whole domain to your own safe senders list: that setting skips the checks that catch forged mail. The section For IT and Email Security Teams has what your IT team needs.

For IT and Email Security Teams

Please make these changes before Nov. 10 if you can.

We sign our mail from anchorpoint.coop with DKIM and publish SPF and DMARC for the domain, so you can allow it on the strength of that authentication. We don’t ask you to exempt us from link or attachment scanning. The domain is new to filters: we registered it on Aug. 31, 2026, and it starts sending mail in November. Expect some filters to treat it with extra suspicion until it builds a sending history.

1. Allow anchorpoint.coop when it passes DMARC

   Recommended rule: the header From domain is anchorpoint.coop and DMARC passes (DKIM signed with d=anchorpoint.coop). Don’t allow on the From address alone. Anyone can forge a From line; the DMARC check stops that.

   Microsoft 365 (Defender portal and Exchange admin center)

   Tenant Allow/Block List, Microsoft’s first-choice method:

   1. Go to security.microsoft.com/tenantAllowBlockList > Domains & addresses > Add.
   2. Select Allow, enter anchorpoint.coop, and set Remove allow entry after to 45 days after last used date.
   3. Select Add.

   Mail flow rule, if the Allow/Block List isn’t enough. Use it only if your MX record points to Microsoft 365, or if Enhanced Filtering for Connectors is on for the connector that receives your inbound mail. Otherwise Microsoft 365 can’t see the real DMARC result.

   1. Go to admin.exchange.microsoft.com, then Mail flow > Rules. Select Add a rule > Create a new rule and name it.
   2. Apply this rule if: The sender > domain is > anchorpoint.coop.
   3. Add condition: The message headers > includes any of these words. Header: Authentication-Results. Word: dmarc=pass.
   4. Do the following: Modify the message properties > set the spam confidence level (SCL) > Bypass spam filtering.
   5. Add action: Modify the message properties > set a message header. Header: X-ETR. Value: Bypass spam filtering for authenticated sender anchorpoint.coop. This marks every message the rule touches.
   6. Select Next, leave Rule mode on Enforce, then Next > Finish > Done.
   7. Turn the rule on. Rules made in the Exchange admin center start disabled: open the rule and use the Enable or disable rule toggle. It can take 30 minutes to apply.

   Microsoft warns never to bypass spam filtering on the sender domain alone. The dmarc=pass condition and the X-ETR header follow Microsoft’s own example.

   Other settings to check:

   • Impersonation protection (Defender for Office 365): add anchorpoint.coop to trusted senders and domains only if impersonation protection flags our real mail. To catch lookalikes of us, you can add anchorpoint.coop, yourleague.org, and mscua.com as custom protected domains.
   • Quarantine: security.microsoft.com/quarantine. Release a message from us only if its Authentication-Results header shows dmarc=pass for anchorpoint.coop and it’s something you expected. When you release it, check Submit the message to Microsoft to improve detection (false positive).
   Google Workspace (Admin console)

   1. In admin.google.com, go to Apps > Google Workspace > Gmail > Routing. Under Manage address lists, select Add address list and name it.
   2. Select Add address, enter anchorpoint.coop, and leave Require sender authentication on. Select Save.
   3. Go to Apps > Google Workspace > Gmail > Spam, Phishing and Malware. Select your top organizational unit, scroll to Spam, and select Configure (or Add another rule).
   4. Name the setting, check Bypass spam filters for messages from senders or domains in selected lists, select the list from step 1, and select Save.

   Changes can take up to 24 hours. Leave the neighboring “hide warnings” options unchecked.

   Other gateways (Proofpoint, Mimecast, Barracuda, and others)

   Add anchorpoint.coop to your safe or permitted senders policy, with DMARC or DKIM required to pass. If your gateway holds mail from recently registered domains and holds ours, exempt anchorpoint.coop from that one check.

2. Cover both of our sending paths

   Staff email and HubSpot email reach you by different routes. A rule that fits one may miss the other.

   	Staff email	Newsletters and announcements
   From	Individual staff, name@anchorpoint.coop	Association addresses such as news@anchorpoint.coop
   Sent through	Google Workspace. Exclaimer, our signature service, adds signatures before mail leaves Google, so you’ll see exclaimer.net in the Received headers.	HubSpot
   Envelope sender (Return-Path)	anchorpoint.coop	A subdomain of hubspotemail.net
   DKIM	d=anchorpoint.coop	d=anchorpoint.coop, plus HubSpot’s own signature
   How DMARC passes	SPF and DKIM, both aligned	DKIM alignment only. A rule that requires aligned SPF will fail this mail.
   Sending IPs	Google’s shared servers	HubSpot’s shared servers

   Please don’t allow either path by IP address. Google’s and HubSpot’s servers send mail for many other organizations, and an IP-based allow skips the authentication checks. If your gateway can only allow by IP, contact us and we’ll help you find another way.

3. Mirror your yourleague.org allow entries

   If you allow yourleague.org with a Tenant Allow/Block List entry or a rule that checks authentication, add the same for anchorpoint.coop. Don’t copy IP-based allows or exemptions from link or attachment scanning; we don’t need them.

4. Keep your yourleague.org and mscua.com rules in place

   Leave them until we tell you they can go, which will be at least a year. Some of our systems may still send from yourleague.org while we finish the move. We’ll keep both domains registered and protected by DMARC in the meantime.

5. Allow our web addresses if they’re blocked

   Some web and DNS filters block recently registered domains. If yours blocks us, allow these hosts by name: anchorpoint.coop and www.anchorpoint.coop (our website), and email.yourleague.org (newsletter images, web versions, click tracking, and subscription preferences).

6. Check quarantine after Nov. 10

   Release a held message from anchorpoint.coop only if it passed DMARC and you expected it, and report each one to your vendor as not junk. Reports train the vendor’s filters faster than an allow rule alone. Never release a message flagged as malware or high-confidence phishing; contact us instead.

dig +short TXT anchorpoint.coop
dig +short TXT _dmarc.anchorpoint.coop
dig +short TXT google._domainkey.anchorpoint.coop
dig +short MX anchorpoint.coop

Watch for Impostors

Questions

Email hello@yourleague.org or call 423-899-2425 and ask for the IT Department. IT teams are welcome to ask for a sample message with full headers.

Prepared by the AnchorPoint IT Department. Updated Oct. 29, 2026.