How to report a phishing email in Outlook

Reporting a suspicious email does more than delete it. It sends a copy to your company’s security team and to Microsoft, which helps block the same attack for everyone else. It takes two clicks.

New Outlook for Windows and Outlook on the web

1. Select the suspicious email. You don’t need to open any links or attachments.
2. On the Home tab, select Report.
3. Choose Report phishing.

Use Report junk for annoying spam that isn’t trying to trick you. Use Report phishing for anything asking you to sign in, pay, open a file, or act urgently.

Classic Outlook for Windows

Select the email, then look on the Home tab for Report or Report Message, and choose Phishing. The button depends on your Outlook version and your company’s setup. If you don’t see either one, use Outlook on the web at outlook.office.com, where Report is always there, or call IT.

Outlook for Mac

Select the email and choose Report in the toolbar, then Report phishing. You need a recent version of Outlook for Mac, so update it if you don’t see the button.

Outlook on iPhone or Android

1. Open the email.
2. Tap … (More).
3. Tap Report phishing (on some versions, Report junk, then Phishing).

What happens next

The email moves out of your inbox, and your security team gets a copy. You might get a short message back saying what they found. Some companies set Outlook to ask for confirmation before sending the report. Just confirm.

Things to avoid

• Don’t forward it to coworkers to ask if it’s real. That spreads it. Report it, and call IT if you’re unsure.
• Don’t reply, even to say “unsubscribe.”
• Already clicked a link or typed your password? Reporting isn’t enough. Follow What to do if you clicked a phishing link and call IT right away.

Matter of Technology clients: not sure if an email is real? Report it and call (844) 628-8371. We’d much rather check a safe email than miss a real attack.