How should we respond to emails impersonating our company?
Our company is being impersonated in a mass-email campaign. Several businesses—some existing clients and some we have never worked with—have received messages claiming to be from us and…
email spoofing
How should we handle phishing emails impersonating our company?
Our company is being impersonated in mass emails sent to various businesses, including some of our actual clients. The messages falsely claim that the recipient is violating licensing…
Is This Microsoft Advance-Exchange Invoice Legit or a Targeted Scam?
I received a PDF invoice for an "Unreturned Advance Exchange Fee" from [email protected]. The invoice is unusually convincing: the Surface Laptop model, returned device serial number, personal details,…
Can Microsoft Message Trace Make an External Spoof Look Like a User Sent an Email to Themselves?
I'm investigating a possible incident where a user appeared to receive an email from their own account. I'm trying to determine whether the message was spoofed or whether…
Can Microsoft Message Trace Make a Spoofed Email Look Like It Came From the User?
I'm investigating a message that appeared to come from a user's mailbox and was addressed to that same user. The Microsoft 365 message trace shows the sender and…
I received a Bitcoin ransom email that appears to come from my school account—should I worry?
I received a threatening email claiming that my device was infected with a remote-access tool and that the sender had copied my data. It demands $9,000 in Bitcoin…
Why Isn't M365 Performing DMARC Lookup on Spoofed Emails?
I've been dealing with a frustrating issue where we've received phishing emails that are spoofing our domain. The sender shows a null sender (MAIL FROM: ), and for…
How to Enable 'Reject Direct Send' in O365 to Prevent Email Spoofing?
I've installed Exchange Online using PowerShell, and I'm trying to figure out if I'm able to enable the 'reject direct send' feature for our account. This email spoofing…
How Do Filters Get Activated for Spoofed Emails Within Our Domain?
I've noticed that when users within our domain are being spoofed—say, receiving emails that appear to be from their own address—filters seem to activate automatically. When I first…
Help! I'm Getting Spoofed Emails Sent to My Inbox
I've been dealing with a frustrating email issue for the past six months. My legitimate Microsoft Office email ([email protected]) keeps receiving messages that are actually intended for someone…