How to Restore Microsoft 365 Outbound Email After Spam Activity
Question details
The user needs to unblock outbound email capabilities in Microsoft 365 after the system restricted sending due to detected spam or suspicious activity.

- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- An administrator needs to restore outbound email access for a restricted mailbox or an entire tenant blocked for spam activity.
- Observed behavior
- Users are unable to send outbound emails, and the account or tenant is flagged and restricted by Microsoft 365 security policies.
Before unblocking the account, thoroughly investigate compromised credentials, malicious forwarding rules, unauthorized applications, and relay settings to prevent immediate re-restriction.
Unblock a Single Restricted Account via the Defender Portal
Use this method if only specific user accounts have been blocked from sending outbound emails by Microsoft 365.
Administrators can use the Restricted Users page in the Microsoft 365 Defender portal to remove the block from specific accounts. Once unblocked, it typically takes about one hour for the outbound email capability to be fully restored.
Open your web browser and go to https://security.microsoft.com/restrictedusers. Sign in using your Microsoft 365 administrator credentials.
Locate and click on the user account that has been restricted from sending outbound emails from the list.
Select the 'Unblock' action and follow the on-screen prompts to confirm the removal of the restriction.

Contact Support for Tenant-Wide Blocks
Use this method if the entire Microsoft 365 tenant is blocked from sending outbound emails.
Looking for a cost-effective alternative to Microsoft Office?
While resolving your Microsoft 365 email administration issues, consider WPS Office as a lightweight, free alternative for your document, spreadsheet, and presentation needs. It offers a familiar interface and seamless compatibility with Microsoft Office file formats.

Frequently Asked Questions
Why did Microsoft 365 restrict my outbound email?
Microsoft restricts accounts when its security systems detect suspicious behavior, such as sending a high volume of spam or bulk emails, which often indicates compromised user credentials.
How long does it take to send emails again after unblocking an account?
Once an administrator removes the user from the Restricted Users portal, it generally takes about one hour for the outbound sending capabilities to be fully restored across the network.
What should I check before unblocking a restricted account?
You should reset the user's password, check for unauthorized inbox forwarding rules, review multi-factor authentication (MFA) settings, and ensure no malicious applications are linked to the account.




