Reporting Phishing and Suspicious Emails In Outlook
Overview
Reporting phishing or suspicious emails in Outlook is a simple and helpful way to protect yourself and your organization from cyber threats. By reporting these messages, you help refine Microsoft’s filters to catch more phishing and spam messages before they reach your inbox.
It’s a quick action that contributes to a safer, more secure email environment for everyone. To better identify and understand what might constitute as a suspicious email, please consult the following pages as well:
Use the built-in Report button in Outlook
The built-in Report button is available in the following versions of Outlook:
Outlook for Microsoft 365:
Current channel: Version 16.0.17827.15010 or later
Monthly Enterprise Channel: Version 16.0.18025.20000 or later
Semi-Annual Channel (Preview): Release 2502, build 16.0.18526.20024 or later
Semi-Annual Channel: Release 2502, build 16.0.18526.20024 or later
Outlook for Mac version 16.89 (24090815) or later*
Outlook for iOS version 4.2511 or later*
Outlook for Android version 4.2446 or later*
The new Outlook for Windows*
Outlook on the web*
* In this version of Outlook, the built-in Report button also supports reporting messages from shared mailboxes or other mailboxes by a delegate.
The Report button is available in supported versions of Outlook if both of the following conditions are true:
User reporting is turned on.
The built-in Report button is configured in the user reported settings at https://security.microsoft.com/securitysettings/userSubmission.
Steps
Use the built-in Report button in Outlook to report junk and phishing messages
Users can report a message as junk from the Inbox or any email folder other than Junk Email folder.
Users can report a message as phishing from any email folder.
In a supported version of Outlook, select one or more messages, select Report, and then select Report phishing or Report junk in the dropdown list. For example:
Outlook for Microsoft 365:
Outlook on the web:
Based on the User reported settings in your organization, the messages are sent to the reporting mailbox, to Microsoft, or both. The following actions are also taken on the reported messages in the mailbox:
Reported as junk: The messages are moved to the Junk Email folder, and the sender is automatically added to the user's Blocked Senders list.
Reported as phishing: The messages are deleted.