Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
As this forum is a public platform, we’ve taken steps to help protect your privacy by removing your organization’s domain name from your message. To ensure your data remains secure, we kindly recommend avoiding the inclusion of personal or organizational details such as domain names or screenshots with sensitive information in future posts.
Hi @Luis Mahiquez,
Thank you for taking the time to share the timeline and the affected address.
Based on the details shared, the mailbox has not received any new messages since October 25, although it can still send email successfully.
This behavior usually occurs when inbound messages are being filtered, redirected, or blocked before they land in the Inbox, even though outbound sending continues to work normally. Common causes include mailbox rules, blocked senders, Junk or Quarantine filtering, mailbox storage limits, or a domain level routing issue such as an MX record pointing to the wrong destination.
Below is a clear and detailed guide to walk you through the steps that can restore your user’s ability to receive emails. If you don't have a permission, please contact IT's administrator and tell them to follow the steps:
1/ Run Message Trace and review Audit logs to pinpoint where inbound mail stops
- Please involve your admin to run a message trace in the Exchange Admin Center (EAC). This will help determine whether the email was ever received by EOP and provide visibility into its delivery status. Run a message trace and view the results in the Exchange admin center in Exchange Online | Microsoft Learn
- If the trace shows no record of the email, it confirms that the message did not reach Exchange and may have been blocked or failed at the connector level.
- Review Audit Logs in Microsoft Purview to identify any unusual activity or configuration changes.
- For your reference: Search the audit log | Microsoft Learn
2/ Review mail flow rules, anti-spam policies that can block delivery
Sometimes, mail flow rules or spam filters may prevent emails from reaching the inbox.
- Go to the Exchange Admin Center.
- Navigate to Mail Flow > Rules and check for any rules that might redirect or block incoming emails.
- Also review Anti-Spam Policies under Microsoft 365 Defender > Policies & Rules.
Make sure there are no filters or rules targeting the affected user’s mailbox.
3/ Check Accepted domains configuration
- In EAC, go to Mail flow > Accepted domains.
- Ensure that the user's email domain is correctly listed as an "Authoritative" accepted domain. If it's not, or if there's a misconfiguration, it could prevent incoming mail.
4/ Check individual mailbox settings
- Junk Email Settings (Outlook/OWA): While less likely to completely block all incoming mail, an aggressive junk mail setting or a large "Blocked Senders" list could be preventing legitimate emails. Have the user check their own blocked senders list in Outlook/OWA.
- Mailbox Quota: Is the user's mailbox full? If so, they won't be able to receive new emails. Check their mailbox quota and usage in EAC under Recipients > Mailboxes.
5/ You can try to check for account restrictions or security actions applied to the mailbox
After an account compromise, Microsoft may automatically restrict email capabilities to protect the environment.
- Visit the Restricted Users page: Security & Compliance
- If the user appears on this list, follow the prompts to remove the restriction.
This action ensures the account is no longer blocked from receiving messages.
6/ After that, Reset credentials and enable Multi Factor Authentication
Since the account was compromised:
- Reset the user’s password.
- Enable Multi-Factor Authentication (MFA) to prevent future unauthorized access.
This step strengthens account security and prevents recurrence.
7/ You might want to review Non-Delivery Reports (NDRs)
If senders are receiving bounce-back messages, these reports can provide useful clues.
- Ask the sender to share any error messages they received.
- Common errors like 550 5.7.606 may indicate the sending IP is blocked.
- You can request removal via Delist IP - Delist IP
8/ Contact IT administrator:
Since your account is managed by your organization, please contact your IT administrator to review your permissions and policies. If the issue persists after these checks, ask your IT administrator to submit a support request directly to Microsoft Support team.
They can raise a support ticket by visiting: Get support - Microsoft 365 admin | Microsoft Learn
As community moderators, we appreciate your understanding that our access to internal development details is limited. Our primary role is to guide users toward the appropriate resources and support channels. While we may not have visibility into deeper backend analysis, we’ll continue doing our best to support you within the scope of our responsibilities.
I hope this information is helpful. Please follow these steps and let me know if it works for you. If you have any updates regarding the issue, please feel free to share them with me.
Thank you for your patience and your understanding. I look forward to continuing the conversation.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment”.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.