not filtered

Sree 1,971 Reputation points
2021-09-09T06:26:01.347+00:00

User published his email address on a website and he was unsurprisingly subjected to some spam emails (about 100). However what is concerning is that only a tiny proportion of these were classified as spam and quarantined/junked. 95% of the emails were delivered to inbox, and they look very suspicious in content. Please help why these were not detected,

Outlook Management
Outlook Management
Outlook: A family of Microsoft email and calendar products.Management: The act or process of organizing, handling, directing or controlling something.
5,003 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,440 questions
0 comments No comments
{count} votes

Accepted answer
  1. Kael Yao-MSFT 37,586 Reputation points Microsoft Vendor
    2021-09-10T02:14:22.197+00:00

    Hi @JustinMicheal-7973

    If you would like to report the suspicious messages, please refer to this link:
    Report messages and files to Microsoft
    For Outlook: Report false positives and false negatives in Outlook


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


1 additional answer

Sort by: Most helpful
  1. Andy David - MVP 143.8K Reputation points MVP
    2021-09-09T11:26:54.723+00:00

    Can't tell you that, but why not set the user's junk mail settings to "Safe Senders Only" and at least most of those will go to junk
    https://www.lifewire.com/accept-mail-from-contacts-only-outlook-1173801#:~:text=Open%20your%20Outlook%20Inbox.&text=Select%20Safe%20Lists%20Only%3A%20Only,Safe%20Senders%20List%20check%20box.

    If you look at the headers of the message, you can see the SCL, but that wont necessarily help you figure out why they were allowed.
    Its also possible a transport rule allowed these.

    Check the anti-spam headers of a message and post here minus any personal info:

    https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-spam-message-headers?view=o365-worldwide

    0 comments No comments