Microsoft cancels Exchange Online bulk email limit

Microsoft has announced that it is canceling its planned daily limit of 2,000 external recipients for Exchange Online bulk email senders — a restriction originally introduced to combat spam and unfair usage.

Microsoft News 2 min read

Microsoft cancels Exchange Online bulk email limit

Microsoft has announced that it is canceling its planned daily limit of 2,000 external recipients for Exchange Online bulk email senders — a restriction originally introduced to combat spam and unfair usage.

The limit, announced in April 2024, was scheduled to roll out between July and December 2025. However, after significant customer feedback, Microsoft decided to halt enforcement indefinitely.

“Customers have shared that this limit creates significant operational challenges… Your feedback matters, and we're committed to solutions that balance security and usability without causing unnecessary disruption,” the Exchange Team stated.

What’s changing — and what’s not

❌ Cancelled:

  • Daily 2,000 external recipient limit per mailbox

✅ Still enforced:

  • Recipient Rate Limit: 10,000 recipients
  • Tenant External Recipient Rate Limit: 5,000 external recipients per day

Microsoft emphasized that future protections will rely on smarter, adaptive anti-abuse mechanisms, rather than hard limits that disrupt legitimate business workflows.

Industry-wide trend

Google is also tightening email security:

  • Bulk senders must authenticate with SPF, DKIM, and DMARC
  • Unauthenticated or high-spam senders are automatically blocked
  • One-click unsubscribe and fast opt-out handling are mandatory

Together, these changes signal a broader shift toward email hygiene, authentication, and reputation-based controls, rather than blunt rate limiting.

📌 Takeaway:
Bulk emailing is still possible — but poor authentication and bad sending practices are no longer tolerated.

Blog

Security 4 min read

FortiMail Gateway Zero-Day Under Active Exploitation

Fortinet has warned customers that a critical zero-day vulnerability in FortiMail is being actively exploited in the wild, putting internet-exposed email security gateways at immediate risk.

AI 5 min read

MI5 Warns of CGTRI Front Linked to Chinese Intelligence

The U.K.’s domestic security service, MI5, has issued an unusually direct public warning about the China General Technology Research Institute (CGTRI), alleging that the research body has strong links to China’s Ministry of State…