Outlook suspended

Hi @Jamie Steinheiser, 

Thank you for posting your question in the Microsoft Q&A forum. 

Based on the details you shared that your Outlook on the web account was flagged as a bad sender and your ability to send email was suspended after sending personalized messages using BCC. I truly understand and appreciate your effort to personalize your outreach and the time you took to describe what happened. 

Microsoft 365 applies automated outbound protections that temporarily block sending when activity resembles bulk or unsolicited email. High recipient counts in BCC, similar content sent repeatedly within short intervals, or a sudden increase in volume can trigger this safeguard. During the restriction you can still sign in and receive mail, while sending remains disabled until an administrator removes the block. 

Please follow the workarounds below that suit your situation and will help restore sending and prevent a recurrence. 

1/ Secure and prepare your account 

• Change your password at aka.ms/sspr, then turn on multi factor authentication at mysignins.microsoft.com. 
• In Outlook on the web, review Rules and Forwarding to ensure nothing is automatically sending or redirecting mail. Go to Settings, select View all Outlook settings, open Mail, then check Rules and Forwarding. Remove anything you do not recognize. 
• Pause any add ins, automation, or third party tools that might send on your behalf. Keep the mailbox idle for a short period after these changes. 

2/ Ask your Microsoft 365 administrator to remove the restriction 

• Since this is an outbound protection block, only your organization administrator can lift it. If you cannot email IT, please contact them using Microsoft Teams, your helpdesk portal, phone, or another approved channel. 
• Share these steps with your admin. In the Microsoft Defender portal, open Email and collaboration, select Review, then Restricted entities. Choose your account and select Unrestrict. They should confirm your password has been changed, multi factor authentication is enabled, and no suspicious rules remain. 
• Unblocking usually takes effect within about one hour. If your admin does not see your account listed, ask them to check again after your password change and mailbox review, then try the unrestrict action once more. 

3/ Send safely going forward 

• Use Mail Merge with Word and Outlook or an approved marketing platform instead of BCC. This sends one individualized message per recipient and aligns with Microsoft 365 safeguards. 
• Send in small batches spaced over time, minimize the use of BCC, and vary subject lines and body text where appropriate. For internal audiences consider a distribution list or a Microsoft 365 Group. 
• Ask your admin to review your outbound spam policy and provide approved tools and guidance for legitimate outreach. If needed they can set up a dedicated mailbox or service designed for compliant bulk communication. 
• Since your account is managed by your organization, please contact your IT administrator to review your permissions and policies. If the issue persists after these checks, ask your IT administrator to submit a support request directly to Microsoft Support team.        

They can raise a support ticket by visiting: Get support - Microsoft 365 admin | Microsoft Learn  

As community moderators, we appreciate your understanding that our access to internal development details is limited. Our primary role is to guide users toward the appropriate resources and support channels. While we may not have visibility into deeper backend analysis, we’ll continue doing our best to support you within the scope of our responsibilities.      

I hope this information is helpful. Please follow these steps and let me know if it works for you. If you have any updates regarding the issue, please feel free to share them with me.        

Thank you for your patience and your understanding. I look forward to continuing the conversation.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".      

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

The account is being blocked because the sending behavior (many messages with large Bcc lists) has triggered outbound spam protection and the address is now treated as a bad sender.

Because this is a business/Exchange Online scenario, resolution requires admin action; it cannot be fully fixed from the mailbox alone.

1. Contact IT without email
   • Use another channel (phone, ticket portal, Teams, in-person, or a personal email account) to reach the company’s IT or Microsoft 365 admin.
   • Explain that outbound mail is blocked and share the exact NDR text or error code (for example, messages like “550 5.1.8 Access denied, bad outbound sender” if present).
2. Admin steps to reinstate the account The Microsoft 365/Exchange Online admin needs to:
   1. Determine whether the account is compromised by following: determine whether your account is compromised.
   2. If compromise is suspected, follow: Secure a compromised email account in Exchange Online.
   3. Unblock the user on the Restricted entities page in the Microsoft 365 Defender portal as described in Remove blocked users from the Restricted entities page.
   • After unblocking, sending restrictions are usually removed within about an hour.
3. Adjust sending practices to avoid future blocks
   • Avoid sending large volumes of messages with all recipients in Bcc. This pattern is commonly associated with spam and can hurt reputation.
   • Reduce volume and frequency of bulk-like sends; do not send “too many emails at once, or send emails to too many people.”
   • Do not put all recipients in Bcc; this can cause junk filters to flag messages and is explicitly discouraged.
   • Send only to recipients who expect the mail and who read or respond; avoid sending to people who never engage.
   • Ask key recipients to add the address to their Safe senders list in Outlook/Outlook.com to improve reputation.
4. If sending to external Outlook.com/Hotmail/MSN/Live recipients
   • If external recipients at Outlook.com domains are not receiving messages even after unblocking, the organization’s IT admin can use the Outlook.com sender support form under Troubleshooting tips for IT admins in “Sender Support in Outlook.com” to investigate deliverability issues, provided mail complies with Microsoft’s policies.

Until the admin removes the restriction on the account in Microsoft 365, outbound email will remain blocked; contacting IT through an alternate channel is required to restore sending.

References:

• NDR error code "550 5.1.8 Access denied, bad outbound sender"
• Sender Support in Outlook.com
• Show, hide, and view the Bcc (blind carbon copy) field in Outlook for Windows