Users are receiving Spam mails

Ø  Share few spam emails along with email headers for analysis.

Ø  To get email headers of the spam emails, you may use below steps:

>>Double click the email for which email headers needs to be extracted.

>> Go to file menu ->Properties.

>> Copy the content under Internet headers and paste in notepad.

Ø  If emails are from shopping sites or related to it, create below transport rule to block these emails:

>> Go to O365 ->Exchange ->Mail flow ->Rules

>> Create a new rule by clicking on ‘+’ sign

>> Click on “More options”.

>> Add the condition as “The subject or body..” and choose “subject or body matches these text patterns”.

>>Add below patterns in dialog box and click on + with each added pattern.

1.       If you are unable to view the content of this email\, please

2.       \>(safe )?unsubscribe( here)?\</a\>

3.       If you do not wish to receive further communications like this\, please

4.       \<img height\="?1"? width\="?1"? src\=.?http\://

5.       If you would prefer not to receive e\-?mails from

6.       To stop receiving these\s+emails\:http\://

7.       To unsubscribe from \w+ (e\-?letter|e?-?mail|newsletter)

8.       no longer (wish )?(to )?(be sent|receive) \w+ email

9.       If you are unable to view the content of this email\, please click here

10.    To ensure you receive (your daily deals|our e-?mails)\, add

11.    If you no longer wish to receive these emails

12.    to change your (subscription preferences|preferences or unsubscribe)

13.    click (here to|the) unsubscribe

>> Add the action as either “Block the message..” or “Redirect the message to hosted Quarantine”.

>> Click on “Stop processing more rules” and save it.

Note: The above list isn’t an exhaustive set of regular expressions found in bulk emails; more can be added or removed as needed. However, it’s a good starting point

Ø  If emails are coming from specific sender or domain, below rule would help:

>>Create a new rule by clicking on ‘+’ sign

>> Click on “More options”.

>> Add the condition as “The sender domain is” or “The sender is this person”

>>Add the domain name or email address.

>>Add the action as either “Block the message..” or “Redirect the message to hosted Quarantine”.

>> Click on “Stop processing more rules” and save it.

Ø  If you are unable to create Transport rule, you may block user’s or domain in you OWA settings using below steps:

>>Go to OWA ->Gear button ->Options

>>Go to Block or Allow.

>>Add the email address or domain in Block senders and save it.

I would request you to download "Microsoft Junk E-mail Reporting Add-in" through below link and report the Spam emails.

http://www.microsoft.com/en-us/download/details.aspx?id=18275

I request you to please report Junk emails to Microsoft through Outlook. You could also refer to below link for more information on reporting Junk emails to Microsoft.

http://technet.microsoft.com/en-us/library/jj723127(v=exchg.150).aspx

I am providing you with below links related EOP which might interest you:

Different anti-spam policies in Exchange Online: http://technet.microsoft.com/en-us/library/jj200687(v=exchg.150).aspx

Connection Filtering: http://technet.microsoft.com/en-us/library/jj200718(v=exchg.150).aspx

Configuring content filter policies: http://technet.microsoft.com/en-us/library/jj200684(v=exchg.150).aspx

Configuring outbound spam policies: http://technet.microsoft.com/en-us/library/jj200737(v=exchg.150).aspx

Quarantine: http://technet.microsoft.com/en-us/library/jj200776(v=exchg.150).aspx

Advanced spam filtering Options: http://technet.microsoft.com/en-us/library/jj200750(v=exchg.150).aspx