Handling Quarantined Email
Office 365 email has filters in place to protect users from spam and malicious email like phishing scams. Messages caught by the filters are placed in quarantine for your and BRCC's protection. Users will receive a Spam Notification message once a day, notifying them of any messages that have been placed in quarantine. Any legitimate mail caught by mistake can be released directly from this message or from the quarantine portal (see details below).
Mail left in quarantine will automatically be deleted after 15 days.
Handling Quarantined Email
Legitimate messages placed in quarantine may be released into your inbox one of two ways:
- Directly from the daily spam notification email message or from the https://security.microsoft.com/quarantine (more info below).
- Users can check the quarantine portal anytime or whenever they are missing expected email.
From the spam notification message:
If you receive mail that has been placed in quarantine, you'll receive a message like
that shown in the image below. The following options will be available to you by clicking
the respective links in the message or you can choose to do nothing.
- Release to Inbox – message is removed from quarantine and placed in your inbox.
- Do nothing – message is left in quarantine and deleted automatically after 15 days.
- Review Message – You can review all quarantined mails in quarantine (more info below).
From Microsoft 365 Defender:
Quarantined email can also be handled in the Office 365 Defender.
- Go to https://security.microsoft.com/quarantine
- Click Email & collaboration and then click Review.
- Click Quarantine - A list of your emails in quarantine are displayed.
- Click any message to select it, then choose from the options given:
- Release message
- View message header