Overview
This article provides step-by-step instructions on reporting suspicious emails using the "Report an Email" tool in Outlook.
Reporting suspicious emails helps protect your organization from phishing attacks and other potential threats.
In this Article:
- Introduction
- Report an Email in Outlook Classic
- Report an Email in the New Outlook
- Troubleshooting
- FAQ
- Additional Resources
- Contact Information
Introduction
Reporting suspicious emails is critical in preventing phishing attacks, malware, and other security threats.
The "Report an Email" tool in Outlook allows you to quickly notify your IT team of potential risks.
Report an Email in Outlook Classic
Step 1: Select the Suspicious Email
Open the email you suspect may be phishing or malicious by clicking on it in your inbox.
Step 2: Click the Report an Email Tool
In the Outlook toolbar, locate the "Report an Email" tool. This is typically found in the ribbon at the top right of your screen.
Click on it to start the reporting process.
Step 3: Confirm and Select Phish Alert
After clicking the tool, a confirmation window will appear. Select the "Phish Alert" option to report the email for review
Step 4: Notification of a Simulated or Potential Threat
If the email was part of a simulated phishing attack (e.g., for training purposes), you will receive a notification confirming this.
If the email is a legitimate potential threat, the IT team will be automatically notified, and further actions will be taken.
Report an Email in the New Outlook
Step 1: Select the Suspicious Email
Open the email you suspect may be phishing or malicious by clicking on it in your inbox.
Step 2: Click the Report an Email Tool
In the Outlook email, locate the "Report an Email" tool. This is typically found in the the top right of your email window.
Click on it to start the reporting process.
Step 3: Confirm and Select Phish Alert
After clicking the tool, a confirmation window will appear. Select the "Phish Alert" option to report the email for review
Step 4: Notification of a Simulated or Potential Threat
If the email was part of a simulated phishing attack (e.g., for training purposes), you will receive a notification confirming this.
If the email is a legitimate potential threat, the IT team will be automatically notified, and further actions will be taken.
If you encounter any issues during the reporting process, try the following solutions:
- Don't see the Report an Email Tool? Submit a help desk ticket for assistance
Q: What types of emails should I report?
A: Report any email that seems suspicious, especially those asking for sensitive information, containing unexpected attachments, or links to unverified websites.
Q: What happens if I report a simulated phishing attack?
A: You will receive a notification informing you that the email was part of a simulated security exercise. No further action is required.
Q: Will I be notified if the email is a real threat?
A: While you won’t be notified directly of the threat's status, your IT team will be alerted and will take necessary action to protect the system.
Q: How quickly does IT respond to phishing reports?
A: The IT team prioritizes phishing reports and typically responds very quickly to ensure potential threats are addressed promptly and the system remains secure.
If you need further assistance, please contact our support team: