Reporting a Phishing Email in Outlook

Overview

Reporting phishing emails helps protect you and the entire organization from security threats. Here are step-by-step directions for reporting phishing using the built-in Report button in Outlook across cloud, desktop, Android, and Mac platforms.

NOTE: If you clicked on a link and provided credentials, please call the IT Support Center immediately for assistance updating your password. at: (509) 533-4357 option #2.

New "Report" button vs. Old "Report Message" button

The new Report button in Outlook is built in and ready to use. It works across desktop, web, and mobile versions of Outlook, making it easier and more consistent for reporting phishing or suspicious emails. When you click it, your report goes directly to Microsoft and your organization’s security team to help protect everyone.
In contrast, the Report Message add-in is an older tool that had to be manually installed. Microsoft is no longer updating it, and it will eventually be retired. If you still see both buttons, use the new built-in Report button for a faster and more reliable experience.

Why Should I Click the Report Button?

When you use the "Report" button:

The email is removed from your inbox.
It is sent to our security system, and a ticket is created.
The Information Security Team analyzes the email’s code and origin.
The Information Security Team can then block the sender, the website that sent the email, feed the information into an automated system for future threat detection, and even remove the email from every inbox in the colleges.

Junk vs. Phishing: What’s the Difference?

Action What Happens Report Junk
Moves the email to the Junk folder and blocks the sender. Report Phishing
Moves the email to the Deleted folder and alerts the security team, who can then remove the email organization-wide

How to Report Phishing by Platform

Outlook Desktop (Windows)

Open Outlook from the Desktop.
Select the suspicious email.
Click the "Report" button in the ribbon.
Choose "Report Phishing".
Click "Report"

Outlook for Mac

Open Outlook.
Open the phishing email.
Click on the "Report" button in the ribbon and select "Report Phishing" from the dropdown.
Click "Report".

Outlook Mobile (Android and iOS)

Open the Outlook app on your phone.
Tap the suspicious email.
Tap the 3 "dots” menu at the bottom.
Tap "Report phishing".
Select REPORT
Select OK

5. Quick Tips

Never click links in suspicious emails.
Use the built-in Report button instead of manually moving to Junk for phishing.
Update your Outlook app regularly - security features improve with updates.
Reporting helps protect everyone.

6. Still need assistance?

If you don’t see the Report button or have questions, call the IT Support Center (509) 533-4357 option #2.