Global company here with customers all over the world. We have shared mailboxes that receive incoming external messages containing invoices and remittance information - 100s per day. These are unmanaged mailboxes - an automation moves the messages to an enterprise accounts receivable application.
Problem: 25% of the incoming messages go to Quarantine in Office 365 as Phish or High Confidence Phish, due to our Anti-spam policy.
- These messages contain tons of keywords that are probably impacting deliverability. ('bank account', 'payment', 'invoice', etc.) These messages would appear to be exactly the type of risk that quarantining is set up to mitigate. Except, these messages are legitimate.
- These remittances can come from just about any external email account. Setting up rules based on sender or domain isn't possible. There is no consistency in their submissions, they all use different remittance forms and formatting. Not all are DMARC compliant.
Anyone have any suggestions for ways to safely receive messages of this nature without compromising email security? How does your organization handle them? Thank you!
