How to find message ID to report suspected spam

Question

Hi, I need to report phishing e-mail that microsoft missed to block.

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/submissions-admin?view=o365-worldwide

I don't have Microsoft Defender for Office 365 and I need to find network message id. In message trace there is no needed message id.

Is it possible to find message id without Microsoft Defender for Office 365 and without user that send malicious message to admin?

Answer 1

Hi @ Pavel.Dyachuk ,

In my tests, clicking on "Report Message" in the message trace in the EAC can jump directly to the M365 Defender submission page and populate  the network message id.

If you can't populate it directly, you can get the message trace id: with the get-messagetrace  command：

 

This value is consistent with X-MS-Exchange-Organization-Network-Message-ID:

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.