Failed Emails when Reporting Junk, Phishing, and Spam Emails to Microsoft

Question

Hello,

When users in our domain report junk, non-junk, phishing, or spam emails in their Outlook mailboxes, these reports are showing as failed in both the Exchange Admin Center logs and Microsoft Defender logs.

We do not have any custom email policies in place; we only use the default spam policies provided by Microsoft. It seems that Microsoft's spam policy is blocking the reporting of phishing and junk emails.

I have sent several emails to Microsoft for analysis but have not received any response.

Additionally, the failed emails are being forwarded to a user account designated as a migration account, which does not have email set up. I am unsure why this is happening.

Do you have any suggestions?

Thank you!

Failed Phishing Emails.pdf

Answer 1

Hi @LM-5132

Welcome to our forum!

Do you encounter 'We did not receive the submission, please fix the problem and resubmit'? If so, please refer to the following steps:

More information: Errors during admin submissions - Microsoft Defender for Office 365 | Microsoft Learn 

In addition, here are a few other steps you may want to take:

1. Check Reporting Settings: Ensure that the reporting settings in Microsoft Defender for Office 365 are correctly configured. You can find detailed instructions on how to report spam, non-spam, phishing, and suspicious emails to Microsoft here.
2. Analyze Email Security Reports: Utilize the email security reports available in the Microsoft Defender portal to gain insights into why the reports are failing. These reports can help identify any misconfigurations or issues with the email flow. Detailed guidance on viewing these reports is available here.
3. Forwarding Issue: The forwarding of failed emails to a migration account might be due to a misconfiguration in your mail flow rules or forwarding settings. Check the mail flow rules in the Exchange Admin Center to ensure they are set up correctly and not inadvertently forwarding emails to the wrong account.

Hope it helps.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  

Note: Please follow the steps in our [documentation] to enable e-mail notifications if you want to receive the related email notification for this thread.