MS Account Blocked due to OAuth Emails
Hi! I am writing in this community forum in the event my account gets blocked again due to false positive flagging and to ensure it never happens again. Lately I've been noticing that my MS account has been constantly getting flagged for suspicious activity. Based on the patterns, it seems to be flagged when my TrueNAS server sends OAuth email alert to my own email. Specifcally, my email was blocked after 5 emails were sent in a single day, or it could be from 3 emails being sent in a single minute. This issue only started occuring recently and has never happened before during my time using TrueNAS OAuth emails, so I am not sure what may have changed to cause this. For the time being, I have disabled Outlook OAuth email alerts from TrueNAS for the time being until this bug or whatever the root cause for this has been determined. More importantly I want to discuss potential flaws during the account recovery process that may require the attention of Microsoft employee. During the attempt to recover my account and prove that I am not a bot, I had to click and hold a button. This button is not visible if MSEdge's tracking prevention is set to strict. I refreshed the page multiple times before figuring out I had to add https://account.live.com:443 as an exception. Due to the page refreshing multiple times, the account recovery itself ended up getting blocked. Possibily due to the servers mistakening this as a brute force attempt. This made the recovery process more difficult. Whenever my account is flagged, I get an email from email address removed for privacy reasons to unlock my verify my account. However, many sources indicate that this email is fraudulent and is a form of an AiTM phishing attack (sources: https://learn.microsoft.com/en-us/answers/questions/4583915/i-received-a-email-form-the-email-member-services, https://learn.microsoft.com/en-us/answers/questions/4670819/is-member-services-@-outlook-safe ) This is of course quite ironic since instead of this suspicious email address being flagged for phishing, my own legitimate account gets flagged which triggers some sort of bot reply from the suspicious email that would actually compromise my account. The email also correctly identifies my name, which I have censored. Also, if you copy the link on "verify your account", you will see https://go.microsoft.com/fwlink/?linkid=xxxxxxx. With a phishing mail like this, users who are also affected by false positive flagging for suspicious activity for using OAuth emails are at high risk for falling victim to this scam. So going back to the purpose of this post. Is there any possible way to continue using TrueNAS Outlook OAuth notifications without getting my account falsely flagged as suspicious?
