Advisory: Sophos Endpoint - "Your connection isn't private." We're aware of a certificate issue and are actively working to resolve it. Please see: KB-000045954 for the latest updates.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Phish threat emails being deleted by Outlook

Hello, Apologies if this is in the wrong forum. Outlook seems to be automatically deleting emails from Phish threat.

I've whitelisted the domains/IP's in Office 365, added the TXT records to our domain, added the proper whitelists in the mail flow rules in MS 365.

Emails are still getting quarantined by Microsoft. 

After releasing them from Quarantine, they're landing in people's inboxes, staying there for about 5 seconds, and then being automatically wiped off the face of the earth by Outlook somehow (multiple users, even with no rules in place).  This has been happening repeatedly for two months.  Test messages come through without issue, but once I send out the actual campaign they're immediately flagged and deleted. 

What am I missing and where do I start?



Edited TAGs
[edited by: emmosophos at 7:27 PM (GMT -8) on 16 Feb 2024]