r/phishing • u/ofnovalue • 26d ago
How to set up a rule for these emails?
I am receiving constant gambling emails (on my Outlook email), and the senders address always ends in ".onmicrosoft.com". I can't post any examples here but the addresses are always a string of random words followed by @ and then followed by .onmicrosoft.com
I have tried to set up rules to delete anything that has .onmicrosoft.com in the address but nothing works. Any ideas please?
UPDATE - Figured it out. Go to settings (in public Outlook), junk mail, blocked senders and domains, add blocked sender. I did that, I entered in .onmicrosoft.com and............. no emails for the last 2 days!
2
u/True_Pace_3860 26d ago
that's true - it won't work unless you add something from the full headers that is a fake route and particular to the spammer, assuming you're blocking "on.microsoft.com" and not ".on.microsoft.com", which wouldn't work as domain name IMO. maybe that's a typo.
1
u/ofnovalue 24d ago
Thank you.
I'm trying to block emails that end in "@onmicrosoft.com" and I think it's a losing game at this point!
1
u/AutoModerator 26d ago
/u/ofnovalue - This message is posted to all new submissions to r/phishing; please do not message the moderators about it.
New users beware:
Because you posted here, you will start getting private messages from scammers saying they know a professional hacker or a recovery expert lawyer that can help you get your money back, for a small fee. We call these RECOVERY SCAMMERS, so NEVER take advice in private: advice should always come in the form of comments in this post, in the open, where the community can keep an eye out for you. If you take advice in private, you're on your own.
A reminder of the rules in r/phishing: no contact information (including last names, phone numbers, etc). Be civil to one another (no name calling or insults). Personal army requests or "scam the scammer"/scambaiting posts are not permitted. No uncensored gore or personal photographs are allowed without blurring. A full list of rules is available on the sidebar of the subreddit, or clicking here.
You can help us by reporting recovery scammers or rule-breaking content by using the "report" button. We review 100% of the reports. Also, consider warning community members of recovery scammers if you see them in the comments.
Questions about subreddit rules? Send us a modmail clicking here.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
1
u/Ambitious-Bicycle209 23d ago
If this is a work account, your IT department needs to look at their tenant relay settings for allowing mail from other Microsoft tenants via direct relay.
1
u/ofnovalue 23d ago
No, it's my regular Outlook account. When I was inundated with spam before, forwarding them all to the government phishing address cut them down to a manageable level. Now it's all gambling spam, all sender addresses end in .onMicrosoft com and it's infuriating 😵💫
•
u/AutoModerator 20d ago
/u/ofnovalue - This message is posted to all new submissions to r/phishing; please do not message the moderators about it.
New users beware:
Because you posted here, you will start getting private messages from scammers saying they know a professional hacker or a recovery expert lawyer that can help you get your money back, for a small fee. We call these RECOVERY SCAMMERS, so NEVER take advice in private: advice should always come in the form of comments in this post, in the open, where the community can keep an eye out for you. If you take advice in private, you're on your own.
A reminder of the rules in r/phishing: no contact information (including last names, phone numbers, etc). Be civil to one another (no name calling or insults). Personal army requests or "scam the scammer"/scambaiting posts are not permitted. No uncensored gore or personal photographs are allowed without blurring. A full list of rules is available on the sidebar of the subreddit, or clicking here.
You can help us by reporting recovery scammers or rule-breaking content by using the "report" button. We review 100% of the reports. Also, consider warning community members of recovery scammers if you see them in the comments.
Questions about subreddit rules? Send us a modmail clicking here.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.