Blocking and daily limits are enforced by Exchange Online to prevent outbound spam. When those limits are exceeded, sending is restricted until the limit window resets, or the account/domain is explicitly unblocked by an admin.
For business (Microsoft 365) mailboxes, the admin should:
- Check if senders are restricted as outbound spam
- In the Microsoft 365 Defender portal, go to Email & collaboration → Review → Restricted entities and see if any invoice/statement sending accounts are listed.
- If listed, follow the guidance in Remove blocked users from the Restricted entities page to unblock them. After unblocking, restrictions are usually removed within about an hour.
- Check for NDRs indicating sending limits or spam blocks
- Look at the Non-Delivery Reports (NDRs) returned to the senders.
- If you see errors like 550 5.1.8 Access denied, bad outbound sender, the account has exceeded Exchange Online sending limits and has been blocked as a suspected spam source.
- In that case, first secure the account (treat it as possibly compromised), then unblock it:
- Follow the steps in Secure a compromised email account in Exchange Online.
- Unblock the user on the Restricted entities page in the Microsoft 365 Defender portal.
- Verify domains and connectors if sending high volume
- If invoices/statements are sent from an app or device using a custom domain, ensure the domain is an accepted and validated domain in Microsoft 365.
- If you see NDRs like 5.7.750 Client blocked from sending from unregistered domain, add and validate the sending domain in Microsoft 365 and ensure any outbound connector is correctly configured and uses an accepted domain.
- Stay within sending limits and adjust workflow patterns
- If invoices/statements are sent via SharePoint workflows or automated processes, redesign them so they do not exceed Exchange Online sender limits (for example, number of recipients per message, per minute, or per day).
- For SharePoint Online workflows, configure them to:
- Send to fewer than 200 recipients at a time.
- Use pauses in the workflow to spread sending over time.
- Prefer sending to a Microsoft 365 group, distribution group, or mail-enabled security group instead of many individual recipients.
- Monitor and control outbound spam going forward
- Use the built-in alert policies such as User restricted from sending email, Email sending limit exceeded, and Suspicious email sending patterns detected to get notified when accounts approach or hit limits.
- Use Message trace in the Exchange admin center to review blocked or spam-flagged messages and adjust processes accordingly.
If the sending pattern is legitimate but regularly hits limits (for example, very high-volume invoicing), centralize sending through a small number of well-secured accounts, keep domains fully validated, and ensure automated workflows batch and throttle mail so they remain under the documented Exchange Online sending limits.
References: