Report a Suspicious Email
Overview
When a phishing message slips into your inbox, reporting it helps protect your coworkers and trains your company's filters to catch similar messages next time. This guide shows you how to report a suspicious email from Outlook on desktop, web, and mobile.
Before You Begin
- Do not click any links or open any attachments in the message.
- Do not forward the message to coworkers as a warning. Use the report button instead.
- The reporting button is built into Outlook. If you do not see it, contact support and we will enable it.
Steps
From Outlook on the web (outlook.office.com)
- Open the suspicious message.
- Click Report in the toolbar at the top.
- Choose Report phishing if the message tried to steal credentials or trick you. Choose Report junk for spam.
- Click Report. The message is sent to Microsoft and your IT team, and removed from your inbox.
From Outlook for Windows or Mac (new Outlook)
- Select the suspicious message in your inbox list.
- In the ribbon, click Report.
- Choose Report phishing or Report junk.
- Click Report.
From Outlook on iPhone or Android
- Open the message.
- Tap the three-dot menu in the top right.
- Tap Report junk → Phishing.
- Tap Report.
If your account does not have the report button
- Forward the message as an attachment to phish@bostonmit.com. To attach it, drag the message into a new email instead of using the Forward button.
- In the body, briefly note why it looked suspicious.
Troubleshooting
- If you already clicked a link or opened an attachment: report the email, then follow What to Do If Your Account Is Compromised.
- If the message is from a coworker whose account looks hijacked: report it and then contact that coworker through Teams or in person to alert them.
- If you reported a real message by mistake: it can be released from quarantine. See Release an Email From Microsoft Defender Quarantine.
Related Articles
Need More Help?
Submit a ticket at support.bostonmit.com or email support@bostonmit.com.