Stephanus Becker

Huge increase in false positives since ~ July 28 2023. We have customers that have successfully emailed us for years ending up in the Suspended List. Perhaps the email addresses have ended up on a compromised list that CloudMark is checking?

Anyway, this is not a new issue (I first ran into + reported it in 2021) and it seems to go through phases where it's particularly bad. 

Save yourself the headache and make it SOP to review the suspended ticket listed every day (that way, it'll also be easier to manage/get it done).

Also, fwiw:

Recovering an email from your suspended queue can help improve the sender's reputation going forward. Doing this sends a coded message back to Cloudmark letting them know that you believe the email to be legitimate. Depending on the cause for the spam rating this can resolve the issue for you over time, often just after a few recoveries. This allows for better results through dynamic analysis.