Multiple junk meeting initiations automatically added to Outlook.com calendar

Question

Multiple junk meeting initiations automatically added to Outlook.com calendar

Darren Tangen 0

First of all, shame on Microsoft for allowing this to happen in the first place and secondly for making it so difficult for a subscriber/customer to get help due to your porous security protections. Today, I received multiple malicious/spam meeting invitations. One was titled “Memory Wellness Breakthroughs.” My calendar is now completely infected with bogus spam entries. Every single day with multiple calendar entries. Outlook correctly classified the underlying meeting request as Junk Email, yet Outlook nevertheless automatically placed the event on my primary calendar, spanning September 21 through October 5, even though I never accepted, acknowledged, or responded to the invitation.

This means an unknown external sender whose message Microsoft has already classified as junk can cause content, URLs, calendar blocks and reminders to appear on my primary calendar without my consent.

I consider this a security and anti-spam design problem, not simply a request to block an individual sender.

I want Microsoft to explain:

Why a meeting request classified as Junk Email is permitted to create an item on my primary calendar.
How I can configure Outlook.com so that meeting requests from unknown/external senders are not placed on my calendar unless I explicitly accept them.
If Outlook.com currently provides no such setting, please escalate this as a product/security issue. At minimum, meeting invitations classified as Junk Email should never populate the user's primary calendar or generate calendar reminders.

I can provide screenshots showing both the junk-folder meeting request and the corresponding unsolicited calendar event.

Microsoft itself classified the invitation as junk, yet Microsoft's calendar processing still allowed that junk to alter my calendar and generate reminders across all my devices. Fix this now! i also need a solution now!

0 comments

1 answer

Your answer

Answer 1

Kai-H 27,975 Microsoft External Staff Moderator

Hi, Darren Tangen

This is an actual meeting invitation, not an “event from email,” so Outlook.com may place it on the calendar as tentative before you respond. Currently, personal Outlook.com accounts do not have a reliable “add only after I accept” control, and this behavior has been reported to Outlook Engineering.

Here are some suggestions you can try:

In Outlook.com, open Settings > Mail > Rules > Add new rule. Set Condition: Type is Invitation, then Action: Delete. Add exceptions for trusted people or domains from which you regularly receive legitimate invitations. This is the closest available workaround, although it will remove any invitation not covered by an exception.

Empty Junk Email, then also empty Deleted Items. The calendar copy can remain linked to the original meeting message until that message is permanently removed. Avoid selecting any links or responding to the invitation.

Vote and comment on the existing Outlook calendar-spam feature request. Include the screenshots, sender address, date received, and note that the invitation was already classified as junk. This is presently the appropriate product-escalation route.

Darren Tangen 0 Reputation points

2026-09-22T15:33:49.9033333+00:00

Your link to “Outlook calendar spam feature request” poll didn't work. I understand your suggested workarounds, but why have your algorithms produce this result? If an email with a calendar invite has appropriately been put into the junk folder and then maybe that junk folder has also been fully cleared, and now the spam invite is sitting in the deleted folder, why would you allow it to continue to populate somebody’s primary calendar? This makes no sense.
Darren Tangen 0 Reputation points

2026-09-22T15:36:14.8533333+00:00

Spammers have figured out this loophole
Kai-H 27,975 Reputation points Microsoft External Staff Moderator

2026-09-23T07:02:30.91+00:00

Hi, Darren Tangen

You are right to question this. Moving or deleting the invitation email does not necessarily remove the tentative calendar item because Outlook processes meeting requests as calendar data separately from where the message is stored. A meeting can therefore remain tentative even when its request is in Deleted Items.

That design was intended to prevent legitimate invitations from being overlooked, but in this case it creates an obvious abuse path. Junk classification should prevent calendar processing, or at least remove the associated calendar item and reminders when the invitation is permanently deleted. Current Outlook.com controls do not reliably enforce that behavior for personal accounts, and similar cases are documented without a complete user-side fix.

I cannot provide Microsoft’s internal algorithm or confirm precisely why this particular invitation passed calendar processing. However, your conclusion is reasonable: spammers are exploiting the separation between mail filtering and meeting processing.

This should be treated as a product and anti-abuse defect, not as an individual blocked-sender problem. When submitting it through the Outlook.com Help panel, include screenshots showing the same invitation in Junk or Deleted Items and on the primary calendar. Ask that it be categorized specifically as junk-classified meeting requests creating persistent calendar items and reminders.

You can access the new link here: https://feedbackportal.microsoft.com/feedback/forum/89a8afa3-2e1c-ec11-b6e7-0022481f8472