--- title: Turn Off Direct Send in Microsoft Exchange to Protect Yourself from Phishing description: You may not even know Direct Send exists, but it could leave your nonprofit open to phishing attacks. image: https://blog.techsoup.org/hubfs/Blog%20Images/202403/blog-2.0-24.03.01-4-steps-to-build-comunity-thumbnail.jpg --- [![TechSoup Home](https://blog.techsoup.org/hubfs/TechSoup_August2017/ts-logo.svg "TechSoup Home") ](https://www.techsoup.org) [My Account](https://www.techsoup.org/login?ReturnUrl=https://www.techsoup.org/) TB [My Account](https://www.techsoup.org/login?ReturnUrl=https://www.techsoup.org/) TechSoup Blog Browse Blog Posts [Back to Main Page](https://blog.techsoup.org/posts?hsLang=en-gb) × Topics [Show All Posts](https://blog.techsoup.org/en-gb/posts) - [Impact Stories (497)](https://blog.techsoup.org/en-us/posts/topic/impact-stories?hsLang=en-gb) - [Impact Stories Microsoft (353)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-microsoft?hsLang=en-gb) - [Communications and Outreach (307)](https://blog.techsoup.org/en-us/posts/topic/communications-and-outreach?hsLang=en-gb) - [Technology Planning (210)](https://blog.techsoup.org/en-us/posts/topic/technology-planning?hsLang=en-gb) - [Donor and Grants Management (144)](https://blog.techsoup.org/en-us/posts/topic/donor-and-grants-management?hsLang=en-gb) - [Cybersecurity (143)](https://blog.techsoup.org/en-us/posts/topic/cybersecurity?hsLang=en-gb) - [Operations (143)](https://blog.techsoup.org/en-us/posts/topic/operations?hsLang=en-gb) - [Cloud Intrastructure (124)](https://blog.techsoup.org/en-us/posts/topic/cloud-intrastructure?hsLang=en-gb) - [Web Development (122)](https://blog.techsoup.org/en-us/posts/topic/web-development?hsLang=en-gb) - [TechSoup (115)](https://blog.techsoup.org/en-us/posts/topic/techsoup?hsLang=en-gb) - [Libraries (107)](https://blog.techsoup.org/en-us/posts/topic/libraries?hsLang=en-gb) - [Social Media (102)](https://blog.techsoup.org/en-us/posts/topic/social-media?hsLang=en-gb) - [Data and Analytics (94)](https://blog.techsoup.org/en-us/posts/topic/data-and-analytics?hsLang=en-gb) - [Training and Education (76)](https://blog.techsoup.org/en-us/posts/topic/training-and-education?hsLang=en-gb) - [Web and Graphic Design (57)](https://blog.techsoup.org/en-us/posts/topic/web-and-graphic-design?hsLang=en-gb) - [Grant Writing (46)](https://blog.techsoup.org/en-us/posts/topic/grant-writing?hsLang=en-gb) - [Hardware (46)](https://blog.techsoup.org/en-us/posts/topic/hardware?hsLang=en-gb) - [Digital Divide (44)](https://blog.techsoup.org/en-us/posts/topic/digital-divide?hsLang=en-gb) - [The Future of Work (43)](https://blog.techsoup.org/en-us/posts/topic/the-future-of-work?hsLang=en-gb) - [Impact Stories Cisco (40)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-cisco?hsLang=en-gb) - [Accounting and Finance (36)](https://blog.techsoup.org/en-us/posts/topic/accounting-and-finance?hsLang=en-gb) - [Impact Stories Intuit (34)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-intuit?hsLang=en-gb) - [Project Management and Planning (23)](https://blog.techsoup.org/en-us/posts/topic/project-management-and-planning?hsLang=en-gb) - [Impact Stories Symantec (22)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-symantec?hsLang=en-gb) - [Impact Stories Adobe (21)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-adobe?hsLang=en-gb) - [Community and Event Management (20)](https://blog.techsoup.org/en-us/posts/topic/community-and-event-management?hsLang=en-gb) - [Disaster Preparedness (14)](https://blog.techsoup.org/en-us/posts/topic/disaster-preparedness?hsLang=en-gb) - [Impact Stories Arctera (Veritas) (13)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-arctera-veritas?hsLang=en-gb) - [Artificial Intelligence (12)](https://blog.techsoup.org/en-us/posts/topic/artificial-intelligence?hsLang=en-gb) - [E-Commerce (9)](https://blog.techsoup.org/en-us/posts/topic/e-commerce?hsLang=en-gb) - [Impact Stories Autodesk (3)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-autodesk?hsLang=en-gb) - [Website Management (3)](https://blog.techsoup.org/en-us/posts/topic/website-management?hsLang=en-gb) - [Impact Stories Box (2)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-box?hsLang=en-gb) - [Impact Stories ClickTime (2)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-clicktime?hsLang=en-gb) - [Impact Stories NortonLifeLock (2)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-nortonlifelock?hsLang=en-gb) - [Impact Stories Shopify (2)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-shopify?hsLang=en-gb) - [Microsoft (2)](https://blog.techsoup.org/en-us/posts/topic/microsoft?hsLang=en-gb) - [Productivity Solutions (2)](https://blog.techsoup.org/en-us/posts/topic/productivity-solutions?hsLang=en-gb) - [Country-CA (1)](https://blog.techsoup.org/en-us/posts/topic/country-ca?hsLang=en-gb) - [Fundraising (1)](https://blog.techsoup.org/en-us/posts/topic/fundraising?hsLang=en-gb) - [Impact Stories Dell (1)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-dell?hsLang=en-gb) - [Impact Stories Mailshell (1)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-mailshell?hsLang=en-gb) - [Impact Stories ReadyTalk (1)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-readytalk?hsLang=en-gb) - [Impact Stories Refurbished Computers (1)](https://blog.techsoup.org/en-us/posts/topic/impact-stories-refurbished-computers?hsLang=en-gb) - [Server and Network Software (1)](https://blog.techsoup.org/en-us/posts/topic/server-and-network-software?hsLang=en-gb) - [Technology Services (1)](https://blog.techsoup.org/en-us/posts/topic/technology-services?hsLang=en-gb) - [Uncategorized (1)](https://blog.techsoup.org/en-us/posts/topic/uncategorized?hsLang=en-gb) [see all](https://blog.techsoup.org/en-gb/posts/turn-off-microsoft-365-direct-send-to-protect-yourself-from-phishing#) - [Accounting and Finance](https://blog.techsoup.org/posts/topic/accounting-and-finance) - [AI](https://blog.techsoup.org/posts/topic/artificial-intelligence) - [Cloud Infrastructure](https://blog.techsoup.org/posts/topic/cloud-intrastructure) - [Communications and Outreach](https://blog.techsoup.org/posts/topic/communications-and-outreach) - [Community and Event Management](https://blog.techsoup.org/posts/topic/community-and-event-management) - [Cybersecurity](https://blog.techsoup.org/posts/topic/cybersecurity) - [Data and Analytics](https://blog.techsoup.org/posts/topic/data-and-analytics) - [Disaster Preparedness](https://blog.techsoup.org/posts/topic/disaster-preparedness) - [Donor and Grants Management](https://blog.techsoup.org/posts/topic/donor-management) - [Fundraising](https://blog.techsoup.org/posts/topic/fundraising) - [Grant Writing](https://blog.techsoup.org/posts/topic/grant-writing) - [Hardware](https://blog.techsoup.org/posts/topic/hardware) - [Human Resources](https://blog.techsoup.org/posts/topic/human-resources) - [Impact Stories](https://blog.techsoup.org/posts/topic/impact-stories) - [Libraries](https://blog.techsoup.org/posts/topic/libraries) - [Operating Systems](https://blog.techsoup.org/posts/topic/operating-systems) - [Productivity Solutions](https://blog.techsoup.org/posts/topic/productivity-solutions) - [Project Management and Planning](https://blog.techsoup.org/posts/topic/project-management-and-planning) - [Remote Work](https://blog.techsoup.org/posts/topic/remote-work) - [Server and Network Software](https://blog.techsoup.org/posts/topic/server-and-network-software) - [Technology Planning](https://blog.techsoup.org/posts/topic/technology-planning) - [Technology Services](https://blog.techsoup.org/posts/topic/technology-services) - [TechSoup](https://blog.techsoup.org/posts/topic/techsoup) - [Training and Education](https://blog.techsoup.org/posts/topic/training-and-education) - [Web and Graphic Design](https://blog.techsoup.org/posts/topic/web-and-graphic-design) - [Website Management](https://blog.techsoup.org/posts/topic/website-management) × Impact Stories [Show All Impact Stories](https://blog.techsoup.org/posts/topic/impact-stories?hsLang=en-gb) - [Adobe](https://blog.techsoup.org/posts/topic/impact-stories-adobe) - [Autodesk](https://blog.techsoup.org/posts/topic/impact-stories-autodesk) - [Cisco](https://blog.techsoup.org/posts/topic/impact-stories-cisco) - [Intuit](https://blog.techsoup.org/posts/topic/impact-stories-intuit) - [Microsoft](https://blog.techsoup.org/posts/topic/impact-stories-microsoft) - [Norton LifeLock](https://blog.techsoup.org/posts/topic/impact-stories-nortonlifelock) - [Symantec](https://blog.techsoup.org/posts/topic/impact-stories-symantec) - [Veritas](https://blog.techsoup.org/posts/topic/impact-stories-veritas) # Turn Off Direct Send in Microsoft Exchange to Protect Yourself from Phishing You may not even know Direct Send exists, but it could leave your nonprofit open to phishing attacks. ![TechSoup logo](https://blog.techsoup.org/hubfs/TechSoup_August2017/images/ts-chicklet.png) Nick Mediati June 22, 2026 Microsoft Exchange includes [a feature known as Direct Send](https://techcommunity.microsoft.com/blog/exchange/direct-send-vs-sending-directly-to-an-exchange-online-tenant/4439865) that lets devices and apps send emails through your Exchange setup while bypassing any authentication requirements (like a username and password) that you have in place. [According to Microsoft](https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365#direct-send-send-mail-directly-from-your-device-or-application-to-microsoft-365-or-office-365), it's for use when "a legacy device or application" on your network — like a photocopier, printer, or fax server — needs to send or receive emails but doesn't support any other method of doing so. It's also ripe for abuse by bad actors, particularly if you are unfamiliar with how Direct Send works. ## How the Attacks Work Cybercriminals can exploit Direct Send in order to steal information, gain access to your systems, and wreak all sorts of havoc within your organization. Michael Enos, vice president of infrastructure security and compliance at TechSoup, says that phishing attacks sent via Direct Send can be very difficult to identify via normal means. According to Enos, in one attack method, cybercriminals will find content written by nonprofit staff on LinkedIn or other public platforms, and then instruct an AI chatbot to write a phishing email in that person's writing style. They will then use Direct Send to distribute that email to other employees or volunteers of that organization. The email will look legitimate right down to [the email headers](https://support.microsoft.com/en-us/office/view-internet-message-headers-in-outlook-cd039382-dc6e-4264-ac74-c048563d212c) — the bits of data that sit alongside the message and provide information on who sent the message and how they sent it. "There's nothing [visibly] wrong with it," Enos says. "That's how dangerous this is." ## An Ongoing Risk Phishing attacks that use Direct Send aren't new — for example, UK security firm JumpSec [highlighted the risk back in 2023](https://www.jumpsec.com/guides/microsoft-direct-send-phishing-abuse-primitive/) — but our partners at Tech Impact have recently seen an uptick in such attacks that target nonprofits. "This feature has been the target of a renewed effort of automated attacks which abuse the perimeter of 365 and its Exchange Online service by sending specially crafted messages directly to the mail system," Brad Bornman of Tech Impact wrote in an email to its partners. "Because the response originates from within the system, it does not get filtered by security measures in place such as Domain Name Service (DNS) records, Microsoft Defender for Office, or any other security products." This recent wave of attacks was particularly broad. "While Direct Send has been abused before, these recent attacks were notable for both their volume and the number of tenants impacted," Francis Johnson, the chief technology office at Tech Impact, added in an email to TechSoup. ## If You Don't Need Direct Send, Turn It Off If you manage Microsoft 365 for your organization and have never heard of Direct Send before, there's a good chance that you don't need it and can safely turn it off. In fact, [Microsoft itself says that](https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365#direct-send-send-mail-directly-from-your-device-or-application-to-microsoft-365-or-office-365) "[m]ost customers don't need to use Direct Send." In April, 2025, Microsoft added a "Reject Direct Send" feature to Exchange Online that allows you to block this feature. [Microsoft explains how to do so in this blog post](https://techcommunity.microsoft.com/blog/exchange/introducing-more-control-over-direct-send-in-exchange-online/4408790). "When correctly configured and managed, Direct Send is a secure and viable option," [Microsoft's documentation](https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365#direct-send-send-mail-directly-from-your-device-or-application-to-microsoft-365-or-office-365) says. "But customers run the risk of misconfiguration that disrupts mail flow or threatens the security of their communication."   Thumbnail photo: [Shutterstock](https://www.shutterstock.com) ### Related Content [![Bring Your Nonprofit's Rogue IT Out of the Shadows. Here's How.](https://blog.techsoup.org/hubfs/blg-25.12.18-how-drp-strengthened-organizations-digital-foundations-thumbnail.jpg) Operations Bring Your Nonprofit's Rogue IT Out of the Shadows. Here's How. June 22, 2026 ](https://blog.techsoup.org/en-gb/posts/bring-your-nonprofits-rogue-it-out-of-the-shadows.-heres-how?hsLang=en-gb) [![Heavy Lifting: Scaling Creativity with Arts Nonprofit Five Ton Crane](https://blog.techsoup.org/hubfs/Blog%20Images/202602/blog_2026-02-27-fove-tone-crane-rocket.jpg) Impact Stories Autodesk Heavy Lifting: Scaling Creativity with Arts Nonprofit Five Ton Crane June 22, 2026 ](https://blog.techsoup.org/en-gb/posts/heavy-lifting-scaling-creativity-with-arts-nonprofit-five-ton-crane?hsLang=en-gb) [![How Should I Use My Tech Budget? 4 Things to Consider](https://blog.techsoup.org/hubfs/Blog%20Images/202003/blg-20.03.18-best-practices-remote-meetings-thumbnail.jpg) Excluded How Should I Use My Tech Budget? 4 Things to Consider June 12, 2026 ](https://blog.techsoup.org/en-gb/posts/how-should-my-charity-use-its-tech-budget-4-things-to-consider?hsLang=en-gb) [![Top 10 Microsoft Products for Charities](https://blog.techsoup.org/hubfs/Email%20Images/Header%20Images/2021-07-15-skills-header.jpeg) Excluded Top 10 Microsoft Products for Charities June 11, 2026 ](https://blog.techsoup.org/en-gb/posts/top-10-microsoft-products-for-charities?hsLang=en-gb) [![Microsoft Cloud Licence Prices Are Increasing on 1 July 2026](https://blog.techsoup.org/hubfs/Blog%20Images/202205/blog-2.0-22-05-19-microsoft-csp-price-increases-in-september-thumbnail.jpg) Cloud Intrastructure Microsoft Cloud Licence Prices Are Increasing on 1 July 2026 May 29, 2026 ](https://blog.techsoup.org/en-gb/posts/microsoft-cloud-license-prices-are-increasing-on-july-1-2026-uk?hsLang=en-gb) [![The Top 3 Reasons That Charities Join TechSoup](https://blog.techsoup.org/hubfs/Email%20Images/Header%20Images/2020-08-11-meeting-conference-room-header.jpg) Excluded The Top 3 Reasons That Charities Join TechSoup April 09, 2026 ](https://blog.techsoup.org/en-gb/posts/the-top-3-reasons-that-charities-join-techsoup?hsLang=en-gb) ### More TechSoup - [About Us](http://www.techsoup.org/about-us) - [Partner with TechSoup](https://www.techsoup.org/joining-techsoup/partner-with-techsoup) ### Follow Us - [Facebook](https://www.facebook.com/TechSoup) - [LinkedIn](https://www.linkedin.com/company/techsoup) - [Instagram](https://www.instagram.com/techsoup) - [YouTube](https://www.youtube.com/user/TechSoupVideo) - [Medium](https://medium.com/@techsoup) Copyright © 2026, TechSoup Global. All Rights Reserved. - [Cookie Settings](https://blog.techsoup.org/en-gb/posts/turn-off-microsoft-365-direct-send-to-protect-yourself-from-phishing#privacy-link) - [Cookie Policy](https://www.techsoup.org/cookie-policy) - [Privacy Policy](http://www.techsoup.org/privacy-policy) - [Terms of Use](http://www.techsoup.org/terms-of-use) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Nick Mediati", "url" : "https://blog.techsoup.org/en-gb/posts/author/nick-mediati" }, "dateModified" : "2026-06-22T22:02:49.264Z", "datePublished" : "2026-06-22T21:59:59.000Z", "headline" : "Turn Off Direct Send in Microsoft Exchange to Protect Yourself from Phishing", "image" : [ "https://blog.techsoup.org/hubfs/Blog%20Images/202403/blog-2.0-24.03.01-4-steps-to-build-comunity-thumbnail.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.techsoup.org/en-gb/posts/turn-off-microsoft-365-direct-send-to-protect-yourself-from-phishing", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.techsoup.org/hubfs/techsoup-logo.png" }, "name" : "TechSoup" } } ``` ```json { "@context" : "http://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "USA", "addressLocality" : "San Francisco", "addressRegion" : "CA", "postalCode" : "94107", "streetAddress" : "435 Brannan St" }, "alternateName" : [ "TechSoup Global", "TechSoup Global Network" ], "contactPoint" : [ { "@type" : "ContactPoint", "areaServed" : "US", "contactType" : "customer service", "url" : "https://support.techsoup.org/hc/en-us" } ], "founders" : [ { "@type" : "Person", "name" : "Daniel Ben-Horin" } ], "foundingDate" : "1987", "legalName" : "TechSoup Global", "logo" : "http://www.techsoup.org/SiteCollectionImages/Content/schema-techsoup-logo.png", "name" : "TechSoup", "sameAs" : [ "https://twitter.com/techsoup", "https://www.facebook.com/TechSoup", "https://www.linkedin.com/company/techsoup", "https://www.instagram.com/techsoup/", "https://www.youtube.com/TechSoupVideo", "https://www.pinterest.com/techsoup/", "http://techsoup.medium.com/" ], "taxID" : "94-3070617", "url" : "http://www.techsoup.org" } ```