Why is Hotmail Spam Filtering So Bad???

I've checked further and it's even worst than expected. They know that those are not legit emails. If you check the headers of one email that I received. Email sent by "FedEx" (let's pick a company which is known worldwide):

Let's start with one of the most basic feature to prevent scam: SPF. Sender Policy Framework (SPF) is an email-authentication standard used to prevent spammers from sending messages that appear to come from a spoofed domain.

SPF alone could already prevent a huge part of the phishing. Let's see what's happening in the header of an email sent to an outlook.com address:

Authentication-Results: spf=none (sender IP is 81.181.104.131) smtp.helo=instagood.win;

dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=enews.electrabel.com;compauth=pass reason=105 Received-

SPF: None (protection.outlook.com: instagood.win does not designate permitted sender hosts) Received: from instagood.win (81.181.104.131)

by DM6NAM10FT035.mail.protection.outlook.com (10.13.153.59) with Microsoft SMTP Server id 15.20.6222.22 via Frontend Transport; Fri, 7 Apr 2023 14:21:44 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:333E3D730EEACFDC58889A1C33F93B6671905DF811F5C1643C516C0DBEE219CF;UpperCasedChecksum:8F73CB671C6A44639AFC226F549867023165EFA6892D0EEF10AA045121AB5548;SizeAsReceived:348;Count:8 Content-Type: text/html;charset=UTF-8 Date: Fri, 07 Apr 2023 14:21:44 +0000 To: From: "Fedex®", "Fedex®" <@enews.electrabel.com> Subject: ͏, je hebt (𝟭) 𝗽𝗮𝗰𝗸𝗮𝗴𝗲 wachten op levering van FedEX 📦🚛 List-Unsubscribe: <@onbie.shop>

So the SPF failed, the dmarc is not present, the dkim is not present. The sender only uses a from "Fedex, <******@enews.electrabel.com>" (it's the full sender, inserting the email in the from, there is no real from as it's impossible to block that sender as there is no sender).

So everything in the header is shouting "OH THIS IS A NICE PHISHING". But it's going through outlook filter.

Their filtering is non-existent. They should at least by default delete / junk an email which isn't sent from a real email address. That's basic security. And they can't even manage this.

This thread is still very relevant. Like other users, I've had a Hotmail account since the 90s and don't want to give it up - Microsoft needs to tweak whatever it needs to on the server side to address it.

When I looked at my Inbox this morning, I'm amazed at the word combinations that are bypassing Microsoft's server-side filters - obvious to the human eye, clearly not obvious to Microsoft's algorithms.

"Improve Hotmail's junk filters" maybe falls low on their overall priorities - but it is impacting the user experience pretty negatively in my view and a lot of other users. Until the message is heard & addressed by the company, in the meantime Inbox Rules can be very helpful (but take a while to set up). I wish there was a way to block all the emails that solely consist of a giant graphic, but that option doesn't seem to exist.

I also don't get spam in my Gmail, unfortunately, I need to use my Hotmail account for my Xbox and cannot abandon it, but I had sent all my actual important emails to the others folder and I keep getting tons of spam every in my main inbox, it is frustrating that they haven't been able to figure that out, even in 2023, where they have AI.

My today's inbox: