How to Report a Suspicious or Phishing Email Using the Report a Phish / PhishForward Outlook Button

When to report an email?

Report an email if it:

• Requests your password, MFA code, or other sensitive information
• Contains suspicious links or unexpected attachments
• Creates a sense of urgency or pressure to act immediately
• Comes from an unexpected sender or impersonates a trusted organization or person
• Contains unusual wording, spelling mistakes, or unexpected requests
• Appears too good to be true (prizes, refunds, gift cards, etc.)

If you are unsure whether an email is legitimate, it is always better to report it.

If you receive an email that appears suspicious, use the Report a Phish (PhishForward) button in Outlook.

How to report a phishing email:

Outlook Desktop (Windows)

1. Select the suspicious email in your Inbox.
2. In the Outlook toolbar, locate and click Report a Phish or PhishForward.
3. Review any confirmation message that appears.
4. Click Report or Yes to submit the email.

Outlook for macOS

1. Open Outlook on your Mac.
2. Select the suspicious email from your Inbox.
3. In the Outlook ribbon, click Report a Phish or PhishForward.
   • Depending on your Outlook version, the button may appear directly in the toolbar or under the Apps menu.
4. Review the confirmation prompt.
5. Click Report or Submit to send the email to the cybersecurity team.