1- The domain it was sent from doesn't match the domain in the "From:" address.
For example, you got an email from john.smith@gmail.com, but it could've been sent through a social networking site and not Gmail.
2- The email was sent to a Google Group from a domain that has "reject policy" as its DMARC policy