Fix Exchange Transport Rule SCL 9 Emails Reaching Inbox
Question details
A Microsoft Exchange transport rule configured to set the Spam Confidence Level (SCL) to 9 is failing to route messages to the Junk Email folder, allowing spam to reach users' Inboxes.
- Product
- Microsoft Exchange
- Device & OS
- not provided
- Scenario
- Managing anti-spam transport rules in the Microsoft 365 or Exchange admin center.
- Observed behavior
- Emails marked with SCL 9 by a transport rule bypass the Junk folder and are incorrectly delivered to the Inbox.
Ensure you have Exchange Administrator or Global Administrator privileges in your Microsoft 365 tenant to view and edit transport rules and anti-spam policies.
Verify Transport Rule Configuration and Priority
Check if your transport rule is actively enabled and placed at a high enough priority to prevent other rules from overriding it.
In Microsoft Exchange, transport rules are processed in order based on their priority setting. If another rule that bypasses spam filtering (setting SCL to -1) is processed first, it will override your SCL 9 rule.
Navigate to the Exchange Admin Center (EAC) and go to Mail flow > Rules.
Locate your specific SCL 9 transport rule and ensure the 'Enable' checkbox or toggle is turned on.
Review the priority sequence of your rules. Move your SCL 9 rule higher in the list so it is processed before any allow-listing rules that might bypass spam filtering.
Analyze Message Headers for SCL Values
Inspect the email headers of the bypassed messages to confirm whether the SCL 9 value was successfully stamped by the transport rule.
Review Anti-Spam Policy Thresholds
Ensure that your organization's default anti-spam policy is configured to move high-confidence spam (SCL 9) to the Junk Email folder.
Simplify Your Office Experience with WPS Office
While managing Microsoft 365 Exchange environments can be complex and time-consuming, handling your daily documents doesn't have to be. WPS Office offers a lightweight, highly compatible alternative to Microsoft Office for creating, editing, and managing your Word, Excel, and PowerPoint files without the enterprise overhead.
- 1. Download WPS Office: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install the Software: Run the downloaded installer file and follow the simple on-screen instructions to complete the setup in minutes.
- 3. Open Your Documents: Launch WPS Office and instantly open your existing .docx, .xlsx, or .pptx files with full formatting support.
Frequently Asked Questions
Why does an email with SCL 9 still go to the Inbox?
This usually happens if the recipient has added the sender to their personal Safe Senders list in Outlook, or if a higher-priority Exchange transport rule bypassed spam filtering before the SCL 9 rule was processed.
How do I check the Spam Confidence Level (SCL) of an email?
You can check the SCL by viewing the email's internet headers and searching for the 'X-MS-Exchange-Organization-SCL' value. SCL values range from -1 (bypass spam filtering) to 9 (high confidence spam).
What does SCL 9 mean in Microsoft 365?
An SCL of 9 indicates 'High confidence spam.' By default, messages with this rating should be routed to the Junk Email folder or quarantined, depending on how your organization's anti-spam policy is configured.
Can I use transport rules to override user Safe Sender lists?
Yes, Microsoft Exchange administrators can configure transport rules to override user-defined safe sender lists by ensuring the transport rule has a higher priority and is explicitly set to route the message to Junk or Quarantine.
