emails from same company classified as junk

%3CLINGO-SUB%20id%3D%22lingo-sub-189303%22%20slang%3D%22en-US%22%3Eemails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-189303%22%20slang%3D%22en-US%22%3E%3CP%3Eone%20of%20my%20users%20reported%20that%20emails%20from%20a%20certain%20colleague%20always%20goes%20to%20junk%20folder.%3C%2FP%3E%3CP%3Eas%20a%20result%2C%20they%20missed%20out%20on%20her%20emails%20as%20it%20did%20not%20appear%20in%20the%20inbox.%3C%2FP%3E%3CP%3Ethey%20only%20realized%20this%20later%20when%20i%20went%20to%20junk%20folder%20to%20check.%3C%2FP%3E%3CP%3Ehow%20to%20prevent%20this%20from%20happening%20other%20than%20safe%20sender%2C%20unjunk.%3C%2FP%3E%3CP%3Eis%20there%20anything%20to%20do%20with%20the%20sender%20email%20ID%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-189303%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-218294%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-218294%22%20slang%3D%22en-US%22%3E%3CP%3EOffice%20365%20admin%20center%20%26gt%3B%20Support%20%26gt%3B%20New%20service%20request%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-218283%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-218283%22%20slang%3D%22en-US%22%3E%3CP%3Ehow%20do%20i%20open%20a%20support%20ticket%20with%20O365%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213242%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213242%22%20slang%3D%22en-US%22%3E%3CP%3Ewe%20have%20checked%20user%20smartphone%20b4%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213231%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213231%22%20slang%3D%22en-US%22%3EHello%2C%20on%20the%20user%20who%20receive%20email%20spam%20from%20his%20colleague%2C%20does%20he%20sync%20email%20on%20smartphone%20like%20ANDROID...if%20yes%2C%20on%20this%20smartphone%2C%20please%20check%20spam%20rule...this%20rule%20his%20created%20by%20android%20(bad%20action%20of%20the%20user%20like%20drag%20and%20drop).%20delete%20this%20rule%E2%80%A6.it%20will%20be%20ok.%3CBR%20%2F%3Ebye%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213218%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213218%22%20slang%3D%22en-US%22%3EYou%20can%20report%20false%20positive%20messages%20to%20MS%20%3CA%20href%3D%22https%3A%2F%2Ftechnet.microsoft.com%2Fen-us%2Flibrary%2Fjj200769(v%3Dexchg.150).aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftechnet.microsoft.com%2Fen-us%2Flibrary%2Fjj200769(v%3Dexchg.150).aspx%3C%2FA%3E%20or%20open%20a%20support%20ticket.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-212687%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-212687%22%20slang%3D%22en-US%22%3Ethe%20junk%20only%20happens%20to%20one%20particular%20email%20recipent.%3CBR%20%2F%3Ehow%20do%20i%20prevent%20Microsoft%20from%20marking%20it%20as%20spam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-212684%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-212684%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20should%20compare%20Message%20Analyzer%20results%20with%20a%20non-spam%20message%20to%20find%20differences%26nbsp%3Bwhat%20could%20be%20reason%20for%20marking%20it%20spam.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20changing%20the%20name%20works%2C%20maybe%20the%20name%20is%20always%20marked%20as%20spam%20by%20Microsoft.%20What%20if%20SHI%20NI%20sends%20email%20to%20someone%20else%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-212649%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-212649%22%20slang%3D%22en-US%22%3E%3CP%3Ehow%20do%20i%20interpret%20the%20message%20analyzer%20results%3F%3C%2FP%3E%3CP%3Ewhat%20do%20i%20look%20out%20for%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eactually%20we%20found%20a%20simple%20solution%20to%20the%20issue%20by%20changing%20the%20display%20name%20of%20the%20sender.%3C%2FP%3E%3CP%3Ethe%20sender%20display%20name%20is%20currently%20SHI%20NI%2C%20when%20we%20changed%20to%20NG%20SHI%20Ni%2C%20the%20emails%20does%20not%20goes%20to%20junk%20folder%20but%20the%20user%20insist%20on%20using%20SHI%20NI%20as%20her%20display%20name.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-212418%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-212418%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20mentioned%20that%20emails%20from%20a%20certain%20colleague%20are%20marked%20as%20spam.%20Is%20that%20colleague%20from%20outside%20your%20tenant%3F%20If%20so%2C%20check%20that%20their%20SPF%20record%20is%20correctly%20defined.%20Easiest%20way%20is%20to%20use%20nslookup%20from%20command%20prompt.%3C%2FP%3E%3CPRE%3Enslookup%20-q%3DTXT%20%26lt%3Bdomain%26gt%3B%3C%2FPRE%3E%3CP%3EIf%20you%20don't%20%26nbsp%3Bget%20response%20similar%20to%20below%20(there%20might%20be%20ip%20addresses%20and%20include%20entries)%2C%20you%20should%20inform%20the%20sending%20party.%3C%2FP%3E%3CPRE%3E%22v%3Dspf1%20include%3Aspf.protection.outlook.com%20-all%22%3C%2FPRE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20could%20also%20check%20the%20mail%20headers%20by%20copying%20them%20from%20Outlook%20(open%20message%2C%20File%20-%26gt%3B%20Properties%20-%26gt%3B%20Internet%20headers)%20and%20pasting%20them%20to%20Message%20Analyzer%26nbsp%3Bat%20%3CA%20href%3D%22http%3A%2F%2Faka.ms%2Fexrca%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Faka.ms%2Fexrca%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-211544%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-211544%22%20slang%3D%22en-US%22%3E%3CP%3Ewe%20tried%20all%20the%20methods%20recommended%20like%20spam%20filters%2C%20connections%20filters%20but%20still%20the%20user%20email%20ends%20up%20in%20junk%20folder.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fprevent-email-from-being-marked-as-spam-in-eop-and-office-365-74aaade0-efc0-46ac-b949-f2d1d59256fa%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fprevent-email-from-being-marked-as-spam-in-eop-and-office-365-74aaade0-efc0-46ac-b949-f2d1d59256fa%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-189337%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-189337%22%20slang%3D%22en-US%22%3Ewe%20are%20using%20E1%20with%20ATP%20add-on%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-189332%22%20slang%3D%22en-US%22%3ERe%3A%20emails%20from%20same%20company%20classified%20as%20junk%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-189332%22%20slang%3D%22en-US%22%3E%3CP%3EAre%20you%20using%20EOP%20without%20ATP%20(E5%20or%20add-on)%3F%20However%2C%20review%20your%20EOP%20configuration%20in%20the%20tenant%3A%20%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fprevent-email-from-being-marked-as-spam-in-eop-and-office-365-74aaade0-efc0-46ac-b949-f2d1d59256fa%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fprevent-email-from-being-marked-as-spam-in-eop-and-office-365-74aaade0-efc0-46ac-b949-f2d1d59256fa%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20are%20some%20ways%20to%20prevent%20emails%20marked%20as%20spam%2Fbulk.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAnd%20have%20a%20look%20at%20the%20EXO%20service%20incident%20from%20last%20week%20in%20your%20Office%20365%20admin%20portal%3A%20EX135575%20-%20Email%20is%20being%20marked%20incorrectly%20as%20a%20phishing%20scam%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

one of my users reported that emails from a certain colleague always goes to junk folder.

as a result, they missed out on her emails as it did not appear in the inbox.

they only realized this later when i went to junk folder to check.

how to prevent this from happening other than safe sender, unjunk.

is there anything to do with the sender email ID ?

12 Replies
Highlighted

Are you using EOP without ATP (E5 or add-on)? However, review your EOP configuration in the tenant: https://support.office.com/en-us/article/prevent-email-from-being-marked-as-spam-in-eop-and-office-3...

 

There are some ways to prevent emails marked as spam/bulk.

 

And have a look at the EXO service incident from last week in your Office 365 admin portal: EX135575 - Email is being marked incorrectly as a phishing scam

Highlighted
we are using E1 with ATP add-on
Highlighted

we tried all the methods recommended like spam filters, connections filters but still the user email ends up in junk folder.

 

https://support.office.com/en-us/article/prevent-email-from-being-marked-as-spam-in-eop-and-office-3...

 

Highlighted

You mentioned that emails from a certain colleague are marked as spam. Is that colleague from outside your tenant? If so, check that their SPF record is correctly defined. Easiest way is to use nslookup from command prompt.

nslookup -q=TXT <domain>

If you don't  get response similar to below (there might be ip addresses and include entries), you should inform the sending party.

"v=spf1 include:spf.protection.outlook.com -all"

 

You could also check the mail headers by copying them from Outlook (open message, File -> Properties -> Internet headers) and pasting them to Message Analyzer at http://aka.ms/exrca

Highlighted

how do i interpret the message analyzer results?

what do i look out for?

 

actually we found a simple solution to the issue by changing the display name of the sender.

the sender display name is currently SHI NI, when we changed to NG SHI Ni, the emails does not goes to junk folder but the user insist on using SHI NI as her display name.

 

Highlighted

You should compare Message Analyzer results with a non-spam message to find differences what could be reason for marking it spam.

 

If changing the name works, maybe the name is always marked as spam by Microsoft. What if SHI NI sends email to someone else?

Highlighted
the junk only happens to one particular email recipent.
how do i prevent Microsoft from marking it as spam
Highlighted
You can report false positive messages to MS https://technet.microsoft.com/en-us/library/jj200769(v=exchg.150).aspx or open a support ticket.
Highlighted
Hello, on the user who receive email spam from his colleague, does he sync email on smartphone like ANDROID...if yes, on this smartphone, please check spam rule...this rule his created by android (bad action of the user like drag and drop). delete this rule….it will be ok.
bye
Highlighted

we have checked user smartphone b4

Highlighted

how do i open a support ticket with O365 ?

 

Highlighted

Office 365 admin center > Support > New service request