Reporting a suspicious email doesn't just protect you — if your organization uses Microsoft Defender for Office 365, reported messages help improve filtering for everyone else too.

Outlook for Windows (Classic)

1. Select the suspicious email without opening any links or attachments in it.
2. Look for the Report Message button on the Home ribbon (added by your organization's security add-in).
3. Choose Phishing from the dropdown.
4. Confirm the report — the message is sent to Microsoft and/or your IT team, and typically removed from your inbox.

If you don't see a Report Message button, forward the email as an attachment to your IT team or MSP instead of forwarding it normally, so the original headers stay intact for analysis.

Outlook on the Web / New Outlook

1. Select the message in your inbox.
2. Click the ... (more actions) menu, or look for Report in the ribbon.
3. Choose Report Phishing.

Outlook Mobile App

1. Open the email.
2. Tap the ... menu in the top-right corner.
3. Tap Report Junk or Report Phishing, depending on what your organization has configured.

Common Questions

What actually happens after I report a message?

Depending on your organization's setup, the message is submitted to Microsoft for analysis, and it's often automatically removed from your inbox (and sometimes everyone else's, if it was sent to multiple people in your organization).

What if I already clicked something before reporting it?

Report it anyway, but also tell your IT team directly and immediately rather than waiting — the report itself doesn't undo any damage from a click, and IT needs to know right away to check for compromise.