How to Stop Spam and Bounce-Back Emails from Website Logins
Question details
The user is receiving unexpected messages or bounce-back notifications connected to website logins and needs to investigate and stop them.
- Product
- Device & OS
- not provided
- Scenario
- Receiving a high volume of unexpected spam or bounce-back (NDR) notifications that appear to be linked to website login processes.
- Observed behavior
- The inbox is receiving bounce-back messages from email providers, indicating potential unauthorized use of website forms, email spoofing, or a compromised account.
Before taking action, carefully examine the message headers of the bounce-back emails to determine if they originate from Microsoft 365, your website's forms, or a third-party email provider.
Investigate the Source and Enable Multi-Factor Authentication
Identify where the unauthorized messages are originating from and secure your email environment using MFA to prevent compromised account usage.
Unexpected bounce-back emails often occur when unauthorized users abuse your website's login forms or when an email account has been compromised to send spam. If the messages are originating from your own email environment, securing the account is the highest priority.
Open the bounce-back email and look for the original sender information. Confirm whether the messages originate from Microsoft 365, your website host, or a third-party provider like 163.com.
If you are using Microsoft 365 for business or education and suspect your account is sending the spam, contact your IT administrator immediately to report the security issue.
Request your administrator to enable Multi-Factor Authentication for your Microsoft 365 account via the Security and Compliance center to prevent further unauthorized access.
If the emails are tied to website logins, inspect your website's registration and login forms. Implement anti-bot measures like CAPTCHA to stop automated scripts from generating spam.
Manage Your Administration and Security Documents with WPS Office
While resolving email security issues and investigating website login spam, ensure your IT documentation and local files are managed efficiently. WPS Office provides a robust, lightweight, and highly compatible office suite for creating and editing your critical documents.
Frequently Asked Questions
Why am I receiving bounce-back emails for messages I never sent?
This is often caused by 'email spoofing.' Spammers forge your email address in the 'From' field of their spam emails. When the spam is rejected by receiving servers, the bounce-back notification (NDR) is automatically routed back to your inbox.
How can I stop bots from exploiting my website login forms?
You can protect your website forms by implementing a CAPTCHA system (like reCAPTCHA), requiring email verification for new accounts, and using a Web Application Firewall (WAF) to filter out malicious bot traffic.
Will enabling MFA stop spam from being sent from my account?
Yes, if your account password was compromised and hackers are using your actual account to send spam, enabling Multi-Factor Authentication (MFA) will block their access and stop the unauthorized sending.
