email issues with M365 subscription

TRaG 210 Reputation points
2026-10-21T00:04:34.7166667+00:00

Here is the unique issue which I am facing

    1. when ever a m365 user (using Microsoft 365 business standard subscription) send an email to external email address it never get received at other end
    1. There is no NDR, Email trace says delivered
    1. When recipient checked for the email in inbox, junk, spam no email received so far
    1. Here is next thing, if the same user is sending a new email to this user it gets received at this end and when replied even the recipient gets the emails in Inbox
    1. Check no quarantine or block at M365 level as well, along with no rule setup

Kindly suggest

Exchange Online
Exchange Online

A cloud-based service included in Microsoft 365, delivering scalable messaging and collaboration features with simplified management and automatic updates.

0 comments No comments

Answer accepted by question author
Dora-T 2,255 Reputation points Independent Advisor
2026-10-21T01:09:16.0666667+00:00

Hi @TRaG

To help narrow down the cause, could you please clarify a few details? 

-Does this happen with one external recipient or multiple recipients? Which email provider or domain do they use (e.g., Gmail, Outlook.com, or a custom domain)? 

-Does the issue affect only one user in your Microsoft 365 tenant, or are multiple users experiencing the same issue? 

-Did this start recently, or has it been happening for a while? 

-Could you send a simple plain-text test email without a signature, hyperlinks, images, or attachments to an affected recipient and check whether it arrives? 

You mentioned that you checked for quarantine, blocking, and mail flow rules in Microsoft 365. Could you please confirm whether these checks were performed only in your Microsoft 365 tenant? 

If so, I recommend asking the recipient or their email administrator to investigate the affected messages on their side. If they use Exchange Online, they can review Message Trace, mail flow rules, quarantine, and anti-spam or anti-phishing policies. If they use another email provider, they can check the equivalent filtering settings and mail server logs, where available. 

Since Message Trace shows the messages as Delivered and no issues have been identified within your Microsoft 365 environment so far, verifying how the recipient's email system handled the messages may help narrow down where the issue is occurring. 

Was this answer helpful?

1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. AI answer

    2026-10-21T05:18:12.77+00:00

    For an external recipient, inspect the detailed trace event rather than relying on the summary “Delivered” label; Receive, Send means Exchange Online accepted the message and sent it toward the external destination, not that it reached the recipient’s mailbox.

    Verify the external handoff

    1. Open Exchange admin center → Mail flow → Message trace.
    2. Trace one missing message using:
      • Exact Microsoft 365 sender
      • Exact external recipient
      • Narrow date/time range
    3. Open the result and expand Message events and More information.
    4. Record:
      • Final event and recipient status
      • Message ID
      • Network Message ID
      • To IP
      • UTC timestamp
      • Destination connector, if shown

    Interpret the result as follows:

    • Receive, Send: Microsoft 365 received the message and sent it to the intended external destination.
    • Receive, Fail: Delivery to the destination failed.
    • Receive, Deliver: The message was delivered to a mailbox; this normally applies to an Exchange Online-hosted recipient.
    • Defer or Pending: Delivery is still being retried.
    • Transfer: Processing moved outside the current trace scope.

    These fields are documented in the Enhanced and Extended reports; the Extended report also exposes destination-server, SMTP, connector, and event details.^1^

    If the summary only says Delivered, generate an Extended report from the Downloadable reports tab, filtering by sender, recipient, or Message ID. Archived report data can take several hours to become available, and the most recent 24 hours might not yet be present.^1^

    Ask the recipient administrator to trace the message

    If the final event is Send, provide the recipient’s mail administrator with:

    • Sender and recipient addresses
    • UTC send time
    • Subject
    • Full Message ID, including angle brackets
    • Microsoft 365 To IP
    • Any destination SMTP response shown by the trace

    Ask them to search their gateway, hosted filtering service, and mail-server logs using the Message ID and timestamp. A message can be accepted at the destination and subsequently filtered, redirected, or deleted by a downstream rule; Microsoft’s trace FAQ explicitly lists delivery followed by deletion as one possible outcome.^2^

    Because new messages and replies are arriving, compare one missing message with one successful message sent to the same recipient. Check whether they differ in:

    • Subject or conversation thread
    • Attachments, links, signatures, or disclaimers
    • Message size
    • Destination To IP or connector
    • SPF, DKIM, and DMARC results at the recipient

    This can expose a content/thread-specific filter or different routing path.

    Check sender authentication conditionally

    If the recipient’s gateway reports an authentication or spam verdict, obtain the successful message’s headers and inspect Authentication-Results:

    • spf=fail: correct the SPF record so it includes every legitimate sending source.
    • dkim=fail or dkim=none: verify DKIM signing and its DNS CNAME records.
    • dmarc=fail: ensure either SPF or DKIM passes and aligns with the visible From domain.

    Microsoft’s decision matrix maps these exact results to the required correction.^3^

    Do not change SPF, DKIM, or DMARC merely because a message is missing; first obtain an authentication failure from the recipient’s logs or from headers of a delivered comparison message.

    Escalation

    If Exchange Online shows a final Send event but the recipient administrator confirms that none of their edge systems recorded the Message ID:

    1. Save the Extended report.
    2. Collect the missing and successful Message IDs, Network Message IDs, UTC timestamps, recipient domain, and To IP values.
    3. Open a Microsoft 365 support request and provide those artifacts, requesting investigation of the outbound SMTP handoff.

    If the recipient’s edge server recorded and accepted the message, escalation belongs with the recipient’s mail-security or hosting provider instead.


    References

    1. Message trace in the Exchange admin center in Exchange Online
    2. Message Trace FAQ in Exchange Online
    3. Troubleshoot email authentication in Microsoft 365
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.