Hey everyone! I'm a new admin for M365 and I'm facing a big issue: our staff (70+ people) are receiving multiple spam and phishing emails in their Outlook inboxes—sometimes 4 or 5 of the same email at once. These emails are not just annoying; they also add random events to our calendars, which makes things even more frustrating. I've tried blocking them, but nothing seems to work. When I decline the calendar events, I keep getting extra emails about it, which is just adding to my stress. I could really use some straightforward advice on how to tackle this problem. If you have any tips or solutions, I'm all ears!
4 Answers
A solid strategy is to block the domain that these emails come from. You can go to the Security portal and navigate to Email & Collaboration, then find the Tenant Allow/Block Lists. Add the domain to block it. Also, if you're able to identify the Network Message ID from one of these spam emails, you can submit it directly to Microsoft in the security submission portal to strengthen your defenses.
If this were me, I'd report each of these spam emails as phishing through the security portal. Look for patterns, like recurring URLs or email addresses, that you can block. Consider setting up Mail Flow rules to send these directly to quarantine so you can review them before deciding what's safe or not. It may involve a bit more work, but it can help clear out the junk effectively!
I've been dealing with this too! Not only do these invites flood my Outlook, but they also show up in Teams notifications, which is just infuriating. Blocking the specific email address seems ineffective since they keep switching it up. It feels like a never-ending cycle.
Same here! I sync my calendar with my Mac's Calendar app, and the invites auto-add there too. It's such a hassle to manage.
First thing's first: check the message headers of these emails. That can really help pinpoint where they're coming from. Those headers will show you the route the emails took, giving you more insight into how to block them effectively.
I had trouble loading the images you mentioned. Can you try sharing them again? It might help diagnose the issue!
Absolutely! Just make sure to analyze the headers carefully to truly see where they originate from before blocking.