Invitations are blocked for this directory due to suspicious activity (production tenant)Invitations are blocked for this directory due to suspicious activity (production tenant)

Our production workforce tenant returns HTTP 403 on POST /v1.0/invitations and on manual invites from the Entra admin center: "Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help."

Cause on our side: a developer sent a series of B2B invitations through the Graph API while testing our onboarding flow. All recipients were our own staff and known contacts; it was not a bulk or marketing campaign. Invitations have been stopped.

The tenant is the guest directory of a compliance SaaS that issues a legally mandatory road-haulage document in Spain, going live on 5 October 2026. New customer users cannot be onboarded until the block is lifted.

Could a Microsoft moderator contact me by private message? I will provide the tenant ID, request IDs and timestamps there.

Thanks in advance!