If you are a Microsoft® 365™ customer whose mailboxes are hosted in Microsoft Exchange Online, your email messages are automatically protected against spam and malware.

Spam is an unsolicited (and typically unwanted) email message. Malware is comprised of viruses and spyware. Viruses infect other programs and data and they spread throughout your computer looking for programs to infect. Spyware refers to malware that gathers your personal information, such as sign-in information and personal data and sends it back to the malware author.

Microsoft 365 has built-in malware and spam filtering capabilities that help protect inbound and outbound messages from malicious software and help protect you from spam. Admins do not need to set up or maintain the filtering technologies, which are enabled by default. However, they can make company-specific filtering customisations in the Exchange admin center (EAC).

Follow this link to the Microsoft hosted index of articles explaining how anti-spam and anti-malware works in Microsoft 365 and how you can fine-tune the default configuration settings to best meet the needs of your establishment: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-spam-and-anti-malware-protection?view=o365-worldwide&form=MY01SV&OCID=MY01SV.