SPF = Fail but still delivered to inbox

[Michael Henriksson]

Hi

A few weeks ago i wrote this post:

https://techcommunity.microsoft.com/t5/Office-365/Email-from-domains-with-no-SPF-goin-to-junk/m-p/17...

But this seems to have changed.

Now we have problem with SPF=Fail going to users inbox.

There has been a increasing amount of spoofing attempts and we are trying hard to keep our users secure, why is Failed SPF still going to users inbox?

SPF Hard fail is active and we are using Office 365 with APT for all our users.

Best Regards

Michael   

[#2]

Best thing to do is report the message via the Junk add-in and open a support case to have it properly investigated. We can certainly give some hints based on the header information and such, but it might as well be something at the backend (like the changes which caused the previous "incident").