Identify and block phishing emails

[Arka Banerjee]

Hi Team,

We have inbound email actions configured in our SNOW HRSD via which HR cases are created. 

Now there is an ask from the client to identify and block certain email addresses as phishing email address, so that those emails are blocked and no cases are created. Can you please help with whether there is a way by which we can have this designed. Thanks!

@Ankur Bawiskar 

[Nilesh Pol]

@Arka Banerjee 

Do trubleshoot with this refference link:

https://www.servicenow.com/community/developer-forum/how-best-to-block-spam-emails/m-p/1842980

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0538110

[Ankur Bawiskar]

@Arka Banerjee 

did you explore email filters feature?

Email filters 

How to use Email Address filters to ignore any email from any sender? 

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Arka Banerjee]

Hi Ankur,

Seems like the email filters plugin is not installed in our client instance. Can you kindly suggest some other method.

[Shivalika]

Hello @Arka Banerjee 

Just use this below "condition" field in "Inbound email action" 

In this condition field just add the email addressess you don't want to trigger case creation from something like below :-

!(email.from=='abc@gmail.com' || email.from == 'xyz@gmail.com')
OR

(email.from!='abc@gmail.com' || email.from != 'xyz@gmail.com')

I hope this answers your queries. 

Kindly mark my answer as helpful and accept solution if it helped you in anyway. This will help me be recognized for the efforts and also move this questions from unsolved to solved bucket. 

Regards,

Shivalika 

My LinkedIn - https://www.linkedin.com/in/shivalika-gupta-540346194

My youtube - https://youtube.com/playlist?list=PLsHuNzTdkE5Cn4PyS7HdV0Vg8JsfdgQlA&si=0WynLcOwNeEISQCY