Overwhelmed by onmicrosoft.com SPAM EMAILS

Question

How do I block onmicrosoft.com SPAM EMAILS? I am getting relentlessly spammed and cannot seem to block these emails. This is a serious problem because about every third or forth email is this onmicrosoft.com SPAM EMAIL. I like office 365 but this is ridiculous!!!

Answer 1

I've now gone 9 days without 1 spam email.

Copy all header and Body of message and foward and paste to

c d o c c m @ m i c r o s o f t . c o m.

This is the only email with microsoft that will shut down the spammers because per microsoft agreement to use their products they cannot abuse this agreement so Microsoft will shut down the spammers for this very reason. Blocking helps a bit but they just change the address. Fowarding to c d o c c m @ m i c r o s o f t . c o m stops them for good.

You must include the entire message you are fowarding to them because it gives Microsoft all the info necessary to close the accounts for violating the rules. It takes a bit of time but well worth it. NEVER unsubscribe, That lets them know your address is valid.

This works for all spam mails not just onmicrosoft. Most everyone uses a windows PC.

Answer 2

DO NOT click on anything including the unsubscribe... EVER! Report it as spam..These are SOME of what I get:

iPhone 14 Pro <******@ezfzezefff.onmicrosoft.com>

Rachel Ray Cookware <******@rthtykjtyujtyfg.onmicrosoft.com>

Christmas Ornament 2023 <******@ggergergreger.onmicrosoft.com>

Dewalt Heater<******@fzdzadzaaz.onmicrosoft.com>

Netflix 2023 <******@fzadzadza.onmicrosoft.com>

T-Mobile 2023 <******@zadzaazz.onmicrosoft.com>

HOME DEPOT 2023 <******@dzdzaza.onmicrosoft.com>

T-Mobile <******@fdererre.onmicrosoft.com>

LendingForBadCredit.com <******@ergergergerge.onmicrosoft.com>

T-Mobile <******@vgergehrtrt.onmicrosoft.com>

Dewalt Heater<******@dfbrthtrhtr.onmicrosoft.com>

Google <******@fzefdzadzaz.onmicrosoft.com>

McDonald's® <******@rthtykjtyujtyfg.onmicrosoft.com>

iCloud Storage ☁ <******@fzefdzadzaz.onmicrosoft.com>

Walmart <******@fdbtrhtrhtr.onmicrosoft.com>

Harbor Freight <******@adbgdhgerthtr.onmicrosoft.com>

Dell Inspiron <******@fdbtrhtrhtr.onmicrosoft.com>

KOHLS ® <******@dzdzaza.onmicrosoft.com>

AspireCard <******@zefezzefzefzfz.onmicrosoft.com>

Club Car Golf Cart <******@adsvcerger.onmicrosoft.com>

Walmart <******@adsvcerger.onmicrosoft.com

Dewalt_Heater<******@adsvcerger.onmicrosoft.com>

Lowe's Winner <******@fzdzaazd.onmicrosoft.com>

AT&T_Confirmation <******@gfnfgrtrfgngf.onmicrosoft.com>

AutoZone <******@ffazdazzadza.onmicrosoft.com>

ADT <******@fezfezfzezeezf.onmicrosoft.com>

Keurig K-Duo Coffee Maker <******@fzdzadzaz.onmicrosoft.com>

DOLLAR GENERAL 2023 <******@fzedzadza.onmicrosoft.com>

You're Approved <******@fzdzadzaz.onmicrosoft.com>

Flashlight <******@fzedzadza.onmicrosoft.com>

Pending Package (1) <******@dzdzazaddza.onmicrosoft.com>

SAMS CLUB 2023 <******@dzdzazaddza.onmicrosoft.com>

STATE FARM 2023 <******@dazdzdzaaz.onmicrosoft.com>

T-Mobile <******@ssdver.onmicrosoft.com>

Harbor Freight <******@dbfdbrhtrt.onmicrosoft.com>

CASH_APP <******@dzayzadgyzadg.onmicrosoft.com>

Smart Watch for you!! <******@fzzadzadzaddd.onmicrosoft.com>

AT&T <******@gefezfzezeez.onmicrosoft.com>

CVS 2023 <******@fzdzadzadzza.onmicrosoft.com

Hair Growth <******@fzdzadzadzza.onmicrosoft.com>

Costco Giftcard <******@fzfzafzadza.onmicrosoft.com>

NeuroPure | Partner <******@dfbfdrhrthrt.onmicrosoft.com>

Harbor Freight <******@dfbfdrhrthrt.onmicrosoft.com>

kb7msc <******@dfbfderer.onmicrosoft.com>

Collagen <******@dgergererhe.onmicrosoft.com>

Hulu <******@fzfzafzadza.onmicrosoft.com>

Harbor Freight <******@dgergererhe.onmicrosoft.com>

T-Mobile <******@fezfezfzezeezf.onmicrosoft.com

$500 Kohls Gift Card Unlocked? <******@fzfzafzadza.onmicrosoft.com>

Ace Hardware Rewards <******@zadzaazz.onmicrosoft.com>

Harbor Freight <******@dfbfdhrthrtjkrtfgn.onmicrosoft.com>

KOHL'S <******@sdvsvererre.onmicrosoft.com

FreeCreditSelect <******@zagdzazyadhgaz.onmicrosoft.com>

O'Reilly Auto Parts <******@thgrthrttrhtrhtrhtr.onmicrosoft.com>

Auto Zone <******@sdvregergregre.onmicrosoft.com>

Lowe's <******@xsvdfrhrth.onmicrosoft.com>

Verizon <******@sdvsvehgehe.onmicrosoft.com>

Ace Hardware <******@sdvrfdegerger.onmicrosoft.com>

ACE <******@zagdzazyadhgaz.onmicrosoft.com>

Harbor Freight <******@xcrfgbhtyhjt.onmicrosoft.com>

iCloud Storage ☁️ <******@fzadzadazdza.onmicrosoft.com>

Auto Zone <******@vdsvrtethtr.onmicrosoft.com>

AspirePreQualify <******@zagdzazyadhgaz.onmicrosoft.com>

2024 <******@dfbgtrjrjtyj.onmicrosoft.com>

MiteRIP <******@erzgrehrthrt.onmicrosoft.com>

Costco <******@dfbrtjjrtrfgn.onmicrosoft.com>

Myco Soothe <******@sdvsdger.onmicrosoft.com>

kb7msc <******@dfbfdbdbdfbfdrteyhtrhr.onmicrosoft.com>

Hulu <******@sberherhdfbdf.onmicrosoft.com>

kb7msc <******@tyjytjtjtyjytjty.onmicrosoft.com>

kb7msc <******@dfbfdberhjhrt.onmicrosoft.com>

Tractor <******@fdbrtjrtjrtjtr.onmicrosoft.com>

Costco <******@dfbrhrtrthr.onmicrosoft.com>

Norton 2023 Alert⛔️ <******@dfbgtrjrjtyj.onmicrosoft.com>

Answer 3

"Have you tried to unscribe from the email?"

Oh really? Do you mean you expect paying customers to take much time and effort to go through the spam and hit the 'unsubscribe' button....which none of them have?

Since 'onmicrosoft' is part of Microsoft, from what I have learned, it is expected for Microsoft to do something about them.

How about eliminating all 'onmicrosoft' users from sending any emails?

By the way, I have tried all the blocking methods stated...THEY DO NOT WORK!

One thing I.did is have my emails forwarded to a free account through Thunderbird...a FREE email client. Its blocking filters work far more effectively than Microsoft's!!!!!!

When using Outlook, I was getting about 16 spams a day. Through the FREE email client, Thunderbird, the most is three or four.

"You get what you pay for" is a phrase we hear so often. The more we pay, the more SPAM we get!

Answer 4

I've decided to script a temporary transport rule that junks/ quarantines everything ending on "number".onmicrosoft.com using regex expressions.

It seems as if the generated onmicrosoft.com accounts always have a number as last character.

(credits go to Knox203 in this article --> Spam increase from onmicrosoft.com addresses : r/msp (reddit.com) )

However,

Trying to execute this script using the Secure Application Model, it seems as if I have insufficient rights to create transport rules.

I can't find a definitive answer if this is an application permission problem, or that this is by design. I can however if i use interactive signin, without the delegated application permissions.

Any thoughts on this?

We have loads of customers complaining about this rn. Logging into 400 tenants isn't an option unfortunately ;-)