Forum Discussion

janakkhadka's avatar
janakkhadka
Iron Contributor
Apr 30, 2025
Solved

Gmail Emails Randomly Quarantined in Microsoft 365 with High Confidence Phish (SCL 8)

Hello Microsoft Tech Community,

We’ve been encountering a recurring issue where emails sent from Gmail to recipients in Microsoft 365 are being randomly quarantined. The quarantine reason is marked as "High Confidence Phish" with a Spam Confidence Level (SCL) of 8, despite the emails being legitimate.

What’s more puzzling is that when the same email is sent to multiple recipients:

  • The email is successfully delivered to Recipient1.
  • The same email to Recipient2 is quarantined.

Has anyone else faced a similar issue? Could this be due to a misclassification in Microsoft Defender or some specific filtering behavior? Any insights or recommendations to prevent such false positives would be greatly appreciated.

Thank you!

  • There's an ongoing SIE for that, EX1064599. According to the latest update, the change has been reverted and the issue should be resolved.

4 Replies

  • angeldas's avatar
    angeldas
    Copper Contributor

    we are facing the exact issue but not with gmail emails.. A lot of our internal emails are getting marked as spam and are getting quarantined. It started this week. 

  • There's an ongoing SIE for that, EX1064599. According to the latest update, the change has been reverted and the issue should be resolved.

    • janakkhadka's avatar
      janakkhadka
      Iron Contributor

      Thank you for the update!

      Actually, the issue wasn’t initially reflected in our portal’s Service Health section, but it is now visible in the Issue History. Regardless, the problem has been successfully restored.

  • bpollard's avatar
    bpollard
    Copper Contributor

    Huge increase in messages from gmail being blocked over the last few days. Not noticed the multiple recipient bit, most of ours seem to be shared mailboxes with fairly high number of incoming mail rather than individuals. 

Resources