Overwhelmed by onmicrosoft.com SPAM EMAILS

"While it's not possible to completely eliminate spam..."

Yep. The excuse to not do anything about spam.

Of course, there is one way to eliminate most spam: cancel EVERY 'onmicrosoft' account!!!! Yes, those with those accounts can get much better service through FREE email clients, for example mail.com is splendid! I have my private domain emails forwarded there with filters that work with about 97% effectiveness while Microsoft, well, I tried blocking filters with about a 97% non-success rate.

Having a private URL domain is supposed to be a supereb guard against spam emails. For over 17 years using the FREE Thunderbird client, spam emails showed up about two times a month.

Har har, with Microsoft Outlook I get that in 18 minutes!

And to think we have to do all the work in going through and deleting spam emails that should have been trashed automatically by the plethora of filters.

"You get what you pay for!" FREE Thunderbird, costs nothing....very few spams. Microsoft, pay big time....big time loads of spam.

Yep, getting the money's wprtj!

Microsoft has to decide how to allocate programming and other resources to tackle any problem. This is not an insignificant issue to address. They need additional pressure to determine this is worth fixing.

Start reporting these spam emails to RBL systems (Spamhaus, Mailspike, Abusix, and Spamcop).

Maybe just pick one, and stick to it, and recommend to others to use that one RBL to hopefully centralize the impact.

Can you imagine how quickly MS would address this if they got blacklisted?

Yes, the cynic in me shouts, MS will just pick up the phone and call the RBL and in their own special, way, suggest that the RBL be removed....

But who knows, maybe one of these RBL's is less susceptible to MS strong arming.

Thanks, this is very helpful. So I only needed to create 10 spam rules in my email client for the 10 digits in:

"digit".onmicrosoft.com.

and that did the trick.

I've decided to script a temporary transport rule that junks/ quarantines everything ending on "number".onmicrosoft.com using regex expressions.

It seems as if the generated onmicrosoft.com accounts always have a number as last character.

(credits go to Knox203 in this article --> Spam increase from onmicrosoft.com addresses : r/msp (reddit.com) )

However,

Trying to execute this script using the Secure Application Model, it seems as if I have insufficient rights to create transport rules.

I can't find a definitive answer if this is an application permission problem, or that this is by design. I can however if i use interactive signin, without the delegated application permissions.

Any thoughts on this?

We have loads of customers complaining about this rn. Logging into 400 tenants isn't an option unfortunately ;-)

the same issue spam from onmicrosoft everyday, of course can do some rule to block but, should take action from ms to clear out such spam account.

First off, I'll say that I have two Microsoft accounts, a web-version provided through work, and a personal paid subscription as well.

In my personal email account, that is not Google and on a secure server, I do not receive any spam mail here, with the exception of spam mails all originating from "onmicrosoft.com"

This is clearly a microsoft issue, and they clearly have no intention of resolving it. Their feelings about their products, services, and customers is also quite clear. They don't care.

The obvious solution is to block all emails coming from an "onmicrosoft.com" account. You may miss some legitimate emails, but as another user stated, this will just be an opportunity to explain to someone what the problem is. Eventually microsoft will lose all users to this platform, and maybe then they'll start to care.

On another note, I had filed a BBB complaint against them for another issue. This went around tech support for a month or so. From this experience, I can tell you with absolute confidence that they do not care about their customers.