How to block a sender that has come through Scareware Blocker

Question

I have Scareware Blocker switched on. A scareware website came through with pop up scare ads.

Trying to follow instructions to add the URL to scareware list as per instructions I found, but in the setting only 'Add sites to never block scare list' is available. This implies that it will not blocked.

How can I create an always block list.

Answer 1

To block a sender or URL that has come through the Scareware Blocker, you can add the URL to the Tenant Allow/Block List in the Microsoft Defender portal. However, it seems you are encountering an issue where only the option to add sites to a "never block" list is available.

Here’s how you can create a block entry for URLs:

1. Go to the Microsoft Defender portal at https://security.microsoft.com.
2. Navigate to Email & collaboration > Policies & rules > Threat policies > Rules section > Tenant Allow/Block Lists.
3. Select the URLs tab.
4. Click on Add, and then select Block.
5. In the Block URLs flyout, enter the URL you want to block. You can add multiple URLs, one per line, up to a maximum of 20.
6. Configure any additional settings, such as how long you want the block entry to last.

This should allow you to block the scareware website effectively. If you continue to experience issues, ensure that your Microsoft Defender settings are correctly configured and that you have the necessary permissions to make these changes.