Anti-spoofing protection action is configured to Move message to the recipients' Junk Email folders in Anti-phishing policy.

Why This Matters

Spoofed emails are a primary vector for phishing attacks, allowing malicious actors to impersonate trusted senders. If your anti-spoofing protection only moves suspicious messages to the Junk Email folder, users may still inadvertently interact with them. Configuring a more aggressive quarantine action reduces the risk of user error and strengthens your organization's email security posture.

What Aether365 Checks

This check verifies that the anti-spoofing protection action in your Anti-phishing policy is not set to "Move message to the recipients' Junk Email folders." It appears in the Aether365 dashboard under microsoft-365 checks.