I'm having a tough time with email spoofing affecting my Microsoft email account. Despite reaching out to support and setting up DMARC, SPF, and DKIM on my server, they've pretty much told me there's nothing I can do to fully prevent this issue. I'm receiving hundreds of return-to-sender messages, mostly targeting Bigpond email addresses. This is particularly troubling because my business email is being misused for fraud against unsuspecting people in Australia. Does anyone have any advice or insights on how to put a stop to this?
6 Answers
It sounds like the issue partly stems from Bigpond being incorrectly configured. You could consider setting up measures to filter out any bounced emails that you didn't actually send to minimize your inbox clutter.
This seems related to Microsoft’s direct send feature. There are some updates on how they’re addressing these issues. You could look into the blogs about spoofing in Microsoft 365 - there might be a fix on the way for those who aren’t utilizing direct send.
If you've set up DMARC, SPF, and DKIM properly, there's not much else you can do beyond that. The bounces you’re seeing mean these spam emails aren’t reaching anyone, which is a bit of a silver lining, even though it’s frustrating to deal with. Unfortunately, you might just have to ride this out for a while until it calms down.
Bigpond is Telstra’s older email service. If you’re getting backscatter (which sounds like your situation), you might want to consider using the Advanced Spam Filter in O365, though it's not the most recommended option these days. It’s really tough to give a solid solution without checking your SPF/DMARC configurations and the actual email bounce responses you’re receiving.
Have you checked if it's truly spoofing or if your account’s been compromised? The high bounce rates with Bigpond could be due to a bunch of inactive mailboxes being closed recently. It might also mean someone could have extracted credentials and is using your domain incorrectly.
Don't forget to enable backscatter filter settings; they might help you manage these unwanted emails more effectively.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures