Microsoft Fails to Fix OneDrive Spam as Users Remain Exposed Months Later
Months-long exposure raises serious security concerns
Microsoft is still dealing with a persistent spam issue in OneDrive that began around December 2025, and users say the situation hasn’t improved. Despite earlier promises of a fix, the problem continues across Windows, macOS, and Android, raising growing concerns around security and usability, according to Neowin.
Users report receiving spam shared folders from unknown accounts, often suspected to be automated bot activity. These folders appear both in email notifications, frequently landing in junk, and directly inside the OneDrive “Shared” tab, making them difficult to ignore.
No way to block or report spam
The core issue lies in how OneDrive currently handles sharing. Anyone can send shared folders by default, and users have no option to block unknown senders or disable incoming shares entirely. Microsoft has acknowledged that there’s no proper system to report or remove spam, leaving users with limited control.
Even worse, affected users say that removing or hiding these shared files doesn’t solve the problem. In many cases, the same spam content reappears, suggesting the system lacks persistence controls for blocking repeat senders.
Security risks and user frustration grow
Some of these shared folders reportedly contain suspicious files, including fake PDFs with embedded links. This has raised alarms about potential phishing attempts, malware distribution, and even exposure to illegal content.
Users also point out that Microsoft hasn’t provided clear guidance on liability or safety, adding to the uncertainty. The combination of persistent spam and lack of control creates a frustrating experience, especially for users who rely on OneDrive for work or sensitive data.
Microsoft promised a fix, but nothing changed
Microsoft previously acknowledged the issue and indicated that a fix would arrive by January 2026. However, months later, there’s still no update to the official support documentation, and the problem appears unresolved.
For now, users remain exposed to unwanted shared content with no reliable way to stop it, block senders, or clean up their shared folders permanently.
In other news, Microsoft is changing how OneDrive handles deleted cloud files. The company is also investigating an Exchange Online issue, and it recently fixed a Classic Outlook bug that prevented emails from being sent.
Read our disclosure page to find out how can you help Windows Report sustain the editorial team. Read more
User forum
0 messages