Account Security Problems

How to Handle Fake Microsoft 365 Domain Expiry Notifications

WPS Content Manager Sep 29, 2026 869 views

Question details

The user is receiving repeated, fake Microsoft 365 domain expiry alerts that include unexpected HTML attachments and automatically generate spam calendar entries, even though their domain is not actually expiring.

How to Handle Fake Microsoft 365 Domain Expiry Notifications

Product: Microsoft 365
Device & OS: not provided
Scenario: Managing email security, filtering phishing attempts, and cleaning up spam calendar events caused by fake domain expiration emails.
Observed behavior: Fake domain expiration notifications are arriving as emails with HTML attachments and automatically adding unwanted events to the user's Outlook calendar.

Before you start

Do not click any links or open HTML attachments in suspicious emails, as they may contain malicious phishing payloads. Log into your Microsoft 365 admin center directly to verify your actual domain status before taking any other action.

Solution 1Recommended

Verify Domain Status and Disable Automatic Calendar Events

Confirm your real domain expiration date in the admin center and prevent Outlook from automatically adding fake events from these emails to your calendar.

Phishing emails often trigger Outlook's feature that automatically parses emails and adds events to your calendar. Disabling this feature for unrecognized senders stops the calendar spam.

Verify Domain Status

Sign in to the Microsoft 365 admin center, navigate to Settings, and select Domains to verify your actual domain expiration dates.

Open Outlook on the Web Settings

Log into Outlook on the web, click the gear icon in the top right corner to open Settings, and click on 'View all Outlook settings'.

Navigate to Calendar Settings

Select the 'Calendar' tab on the left pane, then click on 'Events from email'.

Disable Automatic Event Creation

Change the settings to 'Don't show event summaries in email or on my calendar' for relevant categories, or disable the feature entirely to prevent phishing emails from injecting events.

Verify Domain Status and Disable Automatic Calendar Events

Manual Cleanup: After disabling the feature, you can safely right-click and delete any existing fake expiry events directly from your calendar view.

Solution 2

Create a Targeted Mail-Flow Rule

Block the specific fake notifications without blocking legitimate emails that use HTML attachments.

Solution 3

Review Domain Authentication Policies

Ensure your SPF, DKIM, and DMARC records are correctly configured to prevent attackers from spoofing your own domain.

Free Microsoft Office alternative

Looking for a Secure and Free Alternative to Microsoft Office?

If you are tired of dealing with complex Microsoft 365 admin centers and security configurations, try WPS Office. It provides a lightweight, highly compatible, and secure office suite for your daily document needs without the hassle of complicated domain management.

1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
2. Install WPS Office: Run the installer and follow the simple on-screen instructions to set up the software.
3. Open and Start Working: Launch WPS Office and instantly open your existing .docx, .xlsx, or .pptx files with full formatting support.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats.No complex domain or subscription management required for basic use.Lightweight installation with a clean, familiar, and ad-free interface.Built-in PDF editor and comprehensive document security features.

microsoft office alternative - wps office

Frequently Asked Questions

Why am I getting domain expiry emails when my domain is fine?

Scammers send these phishing emails in bulk to trick users into clicking malicious links or entering admin credentials. They often spoof official Microsoft addresses or use alarming language to create a false sense of urgency.

Should I block all HTML attachments to stop these alerts?

No, blocking all HTML attachments is not recommended because many legitimate business communications use them. Instead, create narrowly scoped mail-flow rules in the Exchange admin center targeting the specific sender or subject.

How do I remove the fake expiry events already on my calendar?

You can manually delete the fake events by right-clicking them in your Outlook calendar and selecting Delete. To prevent future events from appearing automatically, disable the 'Events from email' feature in your Outlook on the web settings.

Microsoft Office Security Issues