Invoices reach Outlook as PDF attachments, sometimes only as a download link, and usually in a mailbox that handles everything else too. Reliable collection takes three pieces: a server-side rule that files invoices into a folder, automatic saving of the files, and a check against your bank account that shows what’s missing. Which tools fit depends on your Outlook version and your Microsoft 365 tenant.
Which Outlook you use decides where rules run
One question matters most: does a rule run on Microsoft’s servers, or only on your computer?
- New Outlook for Windows and Outlook on the web: server-side rules only. They run even when your laptop is closed.
- Classic Outlook for Windows: server-side and client-side rules. Client-side rules don’t run until you sign in to classic Outlook with the account that created them.
- Outlook for Mac: according to Microsoft, the current version only supports server rules (Outlook → Settings → Rules). Support for legacy Outlook for Mac ends in October 2026.
In classic Outlook, a rule turns client-only as soon as it depends on a desktop feature, and according to Microsoft even the condition “with specific words in the subject” or the action “assign it to the category” counts. So does moving mail into a folder that only exists locally, such as a PST file (Microsoft on server-side vs. client-side rules). New Outlook can’t process migrated client-side rules and doesn’t currently support rules for third-party accounts such as Gmail or iCloud. Rule of thumb: create invoice rules in Outlook on the web or new Outlook, where every rule is server-side. On Gmail instead? See how to automate Gmail invoice collection.
Find invoices with Outlook search operators
Before automating, check what’s already there. The search box understands operators (Microsoft’s search reference):
from:billing@vendor.com— mail from that addresssubject:invoice— the word is in the subjecthasattachment:yes— mail with attachmentsreceived:"last month"— orreceived:yesterdaycategory:invoice— the category name contains “invoice”
Combine them with capitalized operators: subject:invoice AND hasattachment:yes AND received:"last month". In a German-language Outlook, Microsoft’s German help lists localized keywords such as von:, betreff:, hatanlagen:wahr and empfangen:. Three quirks matter for invoices:
- Short numbers are ignored: number strings under five digits don’t match and punctuation doesn’t count, so an amount like 49.90 won’t be found. Search by sender and date.
- 1,000 results max: narrow broad searches with
received:orfrom:. - Local archives are skipped: classic Outlook searches only the current mailbox unless you set the scope to All Mailboxes, which includes .pst files.
Rules for invoices: folder, category, order
Every rule needs a name, a condition and an action. For invoices, use an “Invoices” folder plus a matching category. In new Outlook and Outlook on the web (Microsoft’s guide to rules):
- Go to Settings → Mail → Rules and select Add new rule (Add rule in new Outlook), or right-click an invoice email and choose Rules → Create rule.
- Name it “Sort invoices” and, under Add a condition, enter your regular vendors’ sender addresses. A second rule can react to subject words like “invoice”, “receipt” or “Rechnung”.
- Under Add an action, move the message to “Invoices” and assign the “Invoice” category.
- Save. In new Outlook, the button next to the rule runs it on existing messages; in classic Outlook, use File → Manage Rules & Alerts → Run Rules Now.
Mind the order: in Outlook on the web, “Stop processing more rules” is on by default, so a newsletter rule that fires first blocks your invoice rule. Move it to the top. And know the limit: a rule checks sender, subject and text, but can’t tell an invoice PDF from the terms and conditions, and new vendors slip through.
Automatic forwarding is often blocked in Microsoft 365
The obvious idea is a rule that forwards invoices to your bookkeeper, to the upload address of DATEV Unternehmen online (the platform many German tax advisors work in) or to a receipt inbox. In Microsoft 365, that often fails silently.
External auto-forwarding is controlled by the outbound spam filter policy in Microsoft Defender, with three values: Automatic - System-controlled (the default), On - Forwarding is enabled and Off - Forwarding is disabled. According to Microsoft, the default has meant Off since 2021 for new organizations and for existing ones that weren’t actively using it. So in many tenants, forwarding is blocked without anyone having decided it.
The block covers inbox rules that forward or redirect externally and mailbox forwarding set up by an admin; internal forwarding isn’t affected. Blocked messages bounce with a non-delivery report containing 5.7.520 Access denied, Your organization does not allow external forwarding. Your options:
- Ask your admin for a custom outbound spam policy that allows forwarding only for the invoice mailbox; remote domains can limit which external domains are allowed.
- Forward by hand: clicking Forward yourself isn’t automatic forwarding.
- Skip forwarding: services connected via Microsoft sign-in read invoices where they are.
If forwarding is allowed, choose the action deliberately: Forward to, Forward as attachment or Redirect to (Microsoft’s guide). Forwarded messages appear to come from you, redirected ones from the original sender. Forward as attachment sends the original email, attachments included, as a file, so the email body is kept too.
Save attachments to OneDrive with Power Automate
Rules don’t save attachments as files. Power Automate, Microsoft’s automation service, does, with a ready-made template called “Save Office 365 email attachments to OneDrive for Business”. Its Office 365 Outlook and OneDrive for Business connectors are, like SharePoint, standard connectors, so no premium license is needed.
- Sign in to Power Automate (make.powerautomate.com) with your Microsoft 365 account, open the template and confirm the connections.
- In the “When a new email arrives” trigger, set Folder to your invoice folder. Only with Attachments skips mail without files; From and Subject Filter narrow it further.
- Pick a fixed destination, such as
Accounting/Incoming invoicesin OneDrive, or a SharePoint library for shared access. - For a shared mailbox, use “When a new email arrives in a shared mailbox (V2)”; your own account needs access to that mailbox.
- Test with a real invoice email and check that the run succeeded.
The rule sorts, the flow watches only the invoice folder. It’s still an attachment copier with limits:
- New mail only: the trigger works off the received date, so older invoices moved into the folder are skipped.
- Attachments only: download links and invoices in the email body aren’t saved (see invoice only available as a download link).
- Everything attached: without a file-type filter, logos and terms land in the folder. Filter for PDF only, and you lose e-invoices sent as plain XML, the part you must keep in Germany.
- No duplicate check: an invoice sent twice, say with a reminder, means two files (prevent duplicate invoices).
- No link to payments: only reconciliation shows which debit still lacks a receipt.
- Technical gaps: encrypted emails aren’t supported, the shared-mailbox trigger skips messages over 50 MB, and Microsoft notes that emails can be missed when many arrive at once.
A shared mailbox for all invoices
The sturdiest foundation is a dedicated address such as invoices@yourcompany.com that every vendor gets (set up an invoice email address). In Microsoft 365, that’s a shared mailbox: it belongs to no single person and survives vacations and staff changes. According to Microsoft:
- No license up to 50 GB: going up to 100 GB needs an Exchange Online Plan 2 license.
- Internal users only: each user needs their own licensed Exchange Online mailbox, and outsiders such as your external accountant can’t be added. Microsoft cites a maximum of 25 users.
- No direct sign-in: Microsoft recommends blocking sign-in for the mailbox account; access runs through authorized users, for flows and tools too.
- Deletion can’t be prevented: any member can delete messages. It’s an inbox, not an archive.
An AI agent that searches per payment
Rules and flows react to incoming mail without knowing which invoices you need. Your real to-do list is your bank account: every debit needs a receipt. That’s where an AI agent starts. How belege.ai works with Outlook:
- Microsoft sign-in: you connect with read-only mail permissions; no mailbox password is stored. The mailbox must be in Exchange Online.
- Shared mailboxes: add addresses such as invoices@yourcompany.com; belege.ai checks your access before saving.
- Admin approval: some organizations don’t let users consent to apps themselves. Then an admin approves the app once, and belege.ai shows you when that’s needed (background: Configure how users consent to applications).
- A search per open payment: for every bank transaction without a receipt, the agent searches attachments, email bodies and links. If a link leads to a login page, its browser agent signs in to the vendor portal, which works for many portals, not all.
- A daily look at new mail: by default, AI reviews new PDF attachments and imports invoices, receipts, credit notes and payment confirmations, not quotes or delivery notes; the first run starts from the month you pick during setup.
- Check and match: clear matches are assigned directly; otherwise AI compares candidates and checks, among other things, that the amount appears in the document (matching receipts). Identical files are flagged as duplicates, not deleted.
- Questions only when needed: if nothing turns up, the agent asks in Telegram, say for a paper receipt. It creates a substitute receipt (Eigenbeleg) only with your explicit OK.
Prefer forwarding? Every user gets an address like firstname.lastname@belege.ai. Mail from your login address with a valid DKIM signature is processed right away; other senders (via Redirect to, for example) need a one-time approval in Telegram, and emails sent with Forward as attachment are unpacked. Auto-forwarding rules still face the block above. Details: receipts by email and integrations.
Comparison: search, rules, Power Automate, AI agent
| Method | Effort | What it captures | What slips through |
|---|---|---|---|
| Manual search | No setup, but search time every month | Whatever you find and save by hand | Forgotten senders, links, PST archives, other mailboxes |
| Outlook rules | Set up once, maintain the sender list | Mail from known senders, filed by folder and category | New vendors, unusual subjects; nothing gets saved |
| Power Automate | Build the flow, watch for failed runs | Attachments of new mail as files in OneDrive or SharePoint | Links, email bodies, older mail, duplicates, matching to payments |
| AI agent (belege.ai) | Connect mailbox and bank account once | Attachments, email bodies and links per open payment, checked and matched | Paper receipts and portals that can’t be automated; those become a question in Telegram |
Common mistakes
- The rule only runs on your laptop: a classic Outlook rule with a subject condition or category action is client-only; recreate it in Outlook on the web.
- Old invoices in PST archives: AutoArchive and exports put older mail in local .pst files that no server rule, flow or cloud service can see. Before year-end, search with the scope set to All Mailboxes.
- A OneDrive link instead of an attachment: Outlook lets senders share a OneDrive or SharePoint link instead of attaching the file. The flow doesn’t save links, and nobody knows whether a link still works in eight years. Internally, “Attach as copy” helps.
- Invoices outside the mailbox: receipts in Teams chats or employees’ personal mailboxes never reach a rule. Route everything to the invoice address.
- PDFs only: since January 1, 2025, every business in Germany must be able to receive e-invoices, which can arrive as plain XML files.
Retention in Germany: eight years in the original format
If your business is taxed in Germany, incoming invoices are Buchungsbelege (accounting records). Since 2025 you keep them for eight years instead of ten, under the Fiscal Code (Section 147(3) AO) and the VAT Act (Section 14b UStG), both linked in German. Books and annual financial statements stay at ten years; received business letters, including business emails that aren’t accounting records, at six. The period starts at the end of the calendar year in which the invoice was issued (Lexikon: Aufbewahrungsfrist, in German).
The format matters just as much. Under the GoBD, the German Finance Ministry’s rules for digital bookkeeping, you keep an electronically received invoice the way it arrived: the attached PDF, not a printout or screenshot. For e-invoices, the XML counts. If the invoice is the email body itself, the email is the record. See the GoBD (German).
Checklist
- Invoice rule with folder and category created in Outlook on the web or new Outlook, at the top of the list
- Invoice address set up as a shared mailbox and given to every vendor
- External forwarding tested with a real invoice, no 5.7.520
- Flow or agent saves PDF and XML, not just PDF
- PST archives, personal mailboxes and Teams chats searched once
- Monthly check against the bank account: every debit has a receipt
- Invoices kept for eight years in their original format, outside the mailbox