You block a spammer in Defender in a 365 Tenant (as of June 2026, until MS changes their minds and moves it somewhere else)
In defender (security.microsoft.com)
-> Email & collaboration
-> Policies & Rules
-> Threat Policies
-> Tenant Allow/Block Lists
Click on "ADD"
-> Select Block
In the "Add domains & Addresses" box put in the email address you want to block
Set the duration of the block
Click on "ADD"