What's Changing?
To protect the security and integrity of our email systems, ITS is implementing hourly and daily sending limits on university email accounts. Each account will be limited to a maximum number of outgoing messages per 24-hour period. Default settings will be:
- External hourly recipient limit - 500 recipients per hour
- Internal hourly recipient limit - 1,000 recipients per hour
- Total daily recipient limit – 1,000 recipients per day
Why Are We Doing This?
When a university email account is compromised, attackers will often use it to send large volumes of phishing emails to other users. These messages may attempt to steal passwords, personal information, or financial data from recipients who trust the sender because they recognize the university email address.
By limiting the number of emails that can be sent per hour/day, we can significantly reduce the damage caused by a compromised account and stop phishing attacks from spreading quickly across our community.
Additionally, email sending limits help us:
- Protect your account by containing the impact if your credentials are stolen
- Prevent spam from being sent through university accounts
- Maintain our email reputation, ensuring university emails are trusted and delivered reliably
- Comply with email security best practices