not filtered

Question

User published his email address on a website and he was unsurprisingly subjected to some spam emails (about 100). However what is concerning is that only a tiny proportion of these were classified as spam and quarantined/junked. 95% of the emails were delivered to inbox, and they look very suspicious in content. Please help why these were not detected,

Answer 1

Hi @JustinMicheal-7973

If you would like to report the suspicious messages, please refer to this link:
Report messages and files to Microsoft
For Outlook: Report false positives and false negatives in Outlook

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Can't tell you that, but why not set the user's junk mail settings to "Safe Senders Only" and at least most of those will go to junk
https://www.lifewire.com/accept-mail-from-contacts-only-outlook-1173801#:~:text=Open%20your%20Outlook%20Inbox.&text=Select%20Safe%20Lists%20Only%3A%20Only,Safe%20Senders%20List%20check%20box.

If you look at the headers of the message, you can see the SCL, but that wont necessarily help you figure out why they were allowed.
Its also possible a transport rule allowed these.

Check the anti-spam headers of a message and post here minus any personal info:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-spam-message-headers?view=o365-worldwide