Quarantined Email

Microsoft 365 Defender - Email Threat Management

Suspected SPAM and Malware Email is now being filtered to a Quarantine area by Exchange Online Protection. This allows you to safely view the email and decide whether it is legitimate mail that should be delivered to your Inbox, or unwanted mail that should be purged.

To check your Quarantined email, you can:

Please note that the Quarantine page, when loaded directly, will only show personal Quarantined messages. If you suspect that a message sent to a Shared Mailbox has been Quarantined, you will need to wait until that shared mailbox receives the Quarantine notification email from Microsoft.

If you receive an email from quarantine@messaging.microsoft.com, it means you have one or more emails flagged as SPAM or Malware which need your attention:

To review the SPAM/Malware email(s) click on the Review button in the email:

Login to the Microsoft 365 Defender portal Quarantine area. From here you can decide if an email is safe and can be Released to your Inbox, or if it should be Removed from Quarantine (deleted).


Legitimate Mail (incorrectly Quarantined)

To release a message, select the message then click the Release message button. This will deliver the message to your Inbox.

You can optionally report the message to Microsoft for analysis. This is recommended. Microsoft will re-scan the message, and potentially adjust its filters to prevent similar messages from being Quarantined in the future.


Release is complete

Unwanted Email

If you see a message in your Quarantine folder that is definitely unwanted, go ahead and click Remove from quarantine. This will delete the message.