Forum Discussion
Spam Issue
We have a general info email box that website contact forms dump to. All that email arrives just fine. The person who checks this email box, will attach the incoming email to a new email and forward it to the appropriate person in our company.
In the last week, when this person emails the message that comes in, Microsoft is adding this line to the top of the attached email:
[This sender failed our fraud detection checks and may not be who they appear to be. Learn about spoofing at http://aka.ms/LearnAboutSpoofing]
Obviously the email is coming from an @ourdomain.com and going to an @ourdomain.com
I am confused as to why this is being added to the email? Our employees are ignoring the requests when they see this.
Any ideas? I do have a SPF record in my DNS.
Yes, the mail relay/server/whichever's IP address or domain that is being used for email out of the website should be added to the SPF.
4 Replies
Just to double check, when you say you have the SPF record, do you have entries not only for Office365 but also for the mail server that the website is using to send the form?
Thanks for the reply, I should comment that I was incorrect above. The email from the contact form coming to our general box has this message attached to it. So its coming in from the website to our email like that.
I have just the Office365 SPF record, I should add one from our website hosting as well?
Yes, the mail relay/server/whichever's IP address or domain that is being used for email out of the website should be added to the SPF.
