When a Microsoft 365 message goes missing, first determine whether it is missing from the mailbox or only from the Outlook application. Check your approved Outlook web access, search folders, and record any delivery error. Your administrator can then use message tracing to investigate the delivery path instead of guessing.
For a healthcare practice, a missing message may delay a referral, interrupt vendor coordination, or leave the billing team waiting for a response. The solution should restore dependable communication without weakening the safeguards protecting the mailbox.
Is the problem Outlook, the mailbox, or delivery?
Microsoft's troubleshooting guidance distinguishes problems in the email application from mail-flow problems. If the message appears in Outlook on the web but not in your desktop application, the mailbox received it; the local application or its synchronization needs investigation.
If it is absent from both, the message may have been filtered, moved, rejected, or never sent to the correct address. Searching the inbox alone is not enough to establish what happened.
Safe checks your staff can perform
1. Confirm the address and timing
Ask the sender to verify the exact recipient address, approximate send time, and whether they received a delivery failure. A typo, old address, or incorrect autocomplete suggestion can explain an apparent outage.
Use a nonpatient test message when checking delivery. Do not ask someone to repeatedly resend a document containing patient information before you know where the original went.
2. Compare desktop Outlook with approved web access
Open Outlook on the web through your organization's known sign-in route, not a link in an unexpected email. If the message is present there, report the difference to IT. Avoid deleting your Outlook profile or account as a first step.
3. Search beyond the inbox
Look in Junk Email, Deleted Items, Archive, and other relevant folders. Check whether the view is filtered and, if used, whether the message is on the Other tab rather than Focused. Search by sender and date without unnecessarily exposing message contents.
If your organization provides quarantine access, follow its review procedure. Release only messages you can verify. A familiar display name is not sufficient evidence that a message is safe.
4. Record the delivery failure
A nondelivery report often includes an error code that helps administrators identify the issue. Keep the report and send it through your approved support channel. It may contain addresses or message details that need careful handling.
What your Microsoft 365 administrator should check
The administrator should investigate the service's health, mailbox status, applicable limits, and message trace. Microsoft describes message tracing as a way to follow messages through Exchange Online and determine delivery outcomes.
Filtering policies, forwarding settings, inbox rules, and connectors may also need review. Unexpected forwarding or unfamiliar rules deserve prompt attention because they may indicate account misuse rather than an ordinary application problem.
For outgoing messages, IT may need to examine your domain's SPF, DKIM, and DMARC configuration. These mechanisms help receiving services evaluate sending authorization and message authenticity; they are not interchangeable, and they do not guarantee delivery.
Have a qualified administrator make domain and security-policy changes. A poorly planned DNS edit or broad allowlist can introduce new delivery problems or let malicious messages through.
Fix the workflow, not just today's message
If an important referral or authorization cannot wait, use an approved alternative communication method and confirm receipt with the recipient. Clinical staff should determine the appropriate urgency and escalation.
Do not solve persistent filtering problems by turning off spam protection, permitting an entire external domain without review, or forwarding work email to personal accounts. Determine why legitimate messages were affected, then make the narrowest justified correction.
After a fix, test incoming and outgoing mail using nonpatient content. Confirm delivery in both web and desktop access, and monitor whether the issue returns with the same sender.
Frequently asked questions
Does a message in Sent Items prove the recipient received it?
No. It shows that your application submitted the message, not necessarily that the recipient's mailbox accepted it or that someone read it. Delivery investigation and direct confirmation may still be needed.
Does Microsoft 365 automatically make patient email compliant?
No. Appropriate agreements, configuration, access controls, and practice procedures still matter. A subscription by itself does not establish that every use of email is appropriate.
Should we whitelist a sender whose messages go to spam?
Not automatically. Ask IT to verify the sender and determine why filtering occurred. A targeted correction is safer than a broad exception.
Reduce recurring email interruptions
Consolidated IT Solutions provides Microsoft 365 administration, identity management, and email security support. Request an Assessment to address recurring delivery problems without trading reliability for security.
Sources and further reading
Microsoft Learn: Find and fix email delivery issues as a Microsoft 365 for business admin. https://learn.microsoft.com/en-us/troubleshoot/exchange/email-delivery/email-delivery-issues
Microsoft Learn: How email authentication works in Microsoft 365. https://learn.microsoft.com/en-us/defender-office-365/email-authentication-about
HHS: Guidance on HIPAA and Cloud Computing. https://www.hhs.gov/hipaa/for-professionals/special-topics/health-information-technology/cloud-computing/index.html