question

Sree20212021 avatar image
0 Votes"
Sree20212021 asked KaelYao-MSFT commented

not filtered

User published his email address on a website and he was unsurprisingly subjected to some spam emails (about 100). However what is concerning is that only a tiny proportion of these were classified as spam and quarantined/junked. 95% of the emails were delivered to inbox, and they look very suspicious in content. Please help why these were not detected,

office-outlook-itprooffice-exchange-server-mailflowoffice-exchange-server-connectivity
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KaelYao-MSFT avatar image
0 Votes"
KaelYao-MSFT answered KaelYao-MSFT commented

Hi @JustinMicheal-7973

If you would like to report the suspicious messages, please refer to this link:
Report messages and files to Microsoft
For Outlook: Report false positives and false negatives in Outlook


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @JustinMicheal-7973

I am writing here to confirm with you how thing going now?
Please let us know if you would like further assistance.

0 Votes 0 ·
AndyDavid avatar image
0 Votes"
AndyDavid answered AndyDavid edited

Can't tell you that, but why not set the user's junk mail settings to "Safe Senders Only" and at least most of those will go to junk
https://www.lifewire.com/accept-mail-from-contacts-only-outlook-1173801#:~:text=Open%20your%20Outlook%20Inbox.&text=Select%20Safe%20Lists%20Only%3A%20Only,Safe%20Senders%20List%20check%20box.

If you look at the headers of the message, you can see the SCL, but that wont necessarily help you figure out why they were allowed.
Its also possible a transport rule allowed these.

Check the anti-spam headers of a message and post here minus any personal info:

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-spam-message-headers?view=o365-worldwide

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.