Sign Up Someone for Junk Email

This mat not be the exact solution to your issue, https://www.rackaid.com/blog/email-blacklists/. it should be in the right line of thinking though. If it becomes too much of an issue though it may ultimately be easier to kill their email. I suppose it depends on which solution you think is easiest

User has probably been using their work email to sign up for personal stuff. Make sure your org has the proper DNS records setup to alleviate some of this stuff. SPF, DMARC and DKIM

Nope, they did not.   Not when they are receiving 1000 plus emails within day. I’ve seen the emails, they are not from a signing up for a few subscription locations.

We do have the DNS records setup with the SPF, DMARC and DKIM.

Then someone has figured out that your users email is a valid email address and the bad actors are using it to send out their SPAM campaigns. I am assuming that these are NDRs from undeliverable emails. Have you looked at the actual email headers?

It’s not actual spam, these are legit sites trying to confirm the email address.  I have looked at the headers and they are from the actual mailing lists that they are getting signed up for.

The website I mentioned above will take the email you submit and sign up for any and all mailing lists available on the web.  There are no NDR’s.

If the user is being “pranked” by someone, their (the “pranker”) IP and browser info should appear in the emails that your user is getting, so if that’s the case, you may be able to take steps to put a stop to it.

There is no easy way to stop this, If they a low volume emailer it may be easier to create a specific whitelist for them and bin everything else

You could try and create a rule to Unsubscribe automatically https://docs.microsoft.com/en-us/office365/securitycompliance/use-transport-rules-to-configure-bulk-…

We ended up just creating a new email and removing the old one.

ksterley wrote:

We ended up just creating a new email and removing the old one.

Many of these emailers will auto unsubscribe people if they get an ndr to an address.  You could likely just disable the existing email account for a while, then turn it back on after a few days.

Other are suggesting Unsubscribe option.  Most of the time that doesnt work and just adds the email address you want to unsubscribe to even more mailing lists.