As an administrator, you can help prevent spam and malicious email by blocking email addresses or entire domains. This way, you’re automatically rejecting messages from them. Your blocks are in addition to the regular virus and spam protection provided to your organization through Gmail.
Before you begin
- If you have a lot of senders or domains to block, you can add them to an address list. Then, upload the list to block them. For details, go to Use address lists to apply settings to specific people or domains .
- You can exempt senders or domains in a blocked list so that their messages are delivered normally. Messages from approved senders are still subject to regular virus and spam protection provided by Gmail.
- If you turned on Groups for Business for your users, messages from blocked senders or domains might still reach users in Google Groups. It depends on the users’ notification or email settings for the group.
Prevent malicious emails with blocked sender settings
- Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
- Go to Menu Apps > Google Workspace > Gmail > Spam, Phishing and Malware .
Requires having the Gmail Settings administrator privilege .
-
Scroll to Blocked sendersand choose an option:
- If it’s your first time to block messages, click Configure.
- To edit a setting, next to the setting, click Edit.
- For a new setting, click Add another rule.
- Set up the following options:
Bypass this setting for messages from addresses or domains within these approved senders lists (Optional) To exempt addresses or domains from being blocked, check the Bypass this setting for messages received from addresses or domains within these approved senders listsbox and click Use existing listor Create or edit listand follow the instructions above on this page to add the addresses or domains. - Click Save.
Changes can take up to 24 hours but typically happen more quickly. Learn more
You can track changes in the Admin console audit log .
