This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
How do I block onmicrosoft.com SPAM EMAILS? I am getting relentlessly spammed and cannot seem to block these emails. This is a serious problem because about every third or forth email is this onmicrosoft.com SPAM EMAIL. I like office 365 but this is ridiculous!!!
Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
I'm getting the massive spam from this revolving door of onmicrosoft.com addresses. If MS can't figure out how to stop, what is so clearly coming from one spam house, then they have real problems.
I've decided to script a temporary transport rule that junks/ quarantines everything ending on "number".onmicrosoft.com using regex expressions.
It seems as if the generated onmicrosoft.com accounts always have a number as last character.
(credits go to Knox203 in this article --> Spam increase from onmicrosoft.com addresses : r/msp (reddit.com) )
However,
Trying to execute this script using the Secure Application Model, it seems as if I have insufficient rights to create transport rules.
I can't find a definitive answer if this is an application permission problem, or that this is by design. I can however if i use interactive signin, without the delegated application permissions.
Any thoughts on this?
We have loads of customers complaining about this rn. Logging into 400 tenants isn't an option unfortunately ;-)
I fully agree
That is a really stupid advice.
Even if such a message would have an unsubscribe link, it would be a bad choice to click on it.
It can lead to a virus and if you could actually follow an unsubscribe script, it will be an acknowledgement that your email is working, following in even more spam.
If Microsoft won't do anything, I'll take the simple solution and send everything from an onmicrosoft address to junk. I might get one or two upset customers, but I guess I'll get the chance to explain when they CALL me to complain...
JP