Detecting Threats Identifying and Reporting Phishing & Spam Emails
Encountering a suspicious email can be unsettling. The first step is to recognize potential phishing attempts or unwanted spam. Ignoring or deleting these emails is a common response, but reporting them to Microsoft is a proactive way to protect yourself and others.
Microsoft offers two primary methods for reporting these threats: the Report Message add-in for Outlook users and a straightforward forwarding process for those using other email clients or versions. Reporting helps Microsoft improve its spam filtering technology, safeguarding your inbox from future attacks.
Outlook Users Reporting with the Report Message Add-in
If you're an Outlook user, the Report Message add-in is your primary tool. This add-in integrates directly into your Outlook interface, simplifying the reporting process. It works with Office 365 subscriptions and several Outlook versions, including Outlook on the web, Outlook 2013 SP1, Outlook 2016, Outlook 2016 for Mac, and Outlook included with Office 365 ProPlus. You'll need an Office 365 business account to enable add-ins.
To use the Report Message add-in, install and enable it in your Outlook settings. Once installed, select the suspicious email. Click the Report Message icon on the Home Ribbon and choose the appropriate option: Spam or Phishing. You can also report legitimate emails incorrectly marked as spam by selecting the 'Not Junk' option. Microsoft analyzes these reports to fine-tune its filters. Confirm your report by clicking the 'Report' button.
Non-Outlook Users Reporting Without the Report Message Add-in
For those who don't use Outlook or whose version isn't supported, forwarding the email is the alternative. Create a new, blank email message in your preferred email program. Address the new email to the appropriate Microsoft address, depending on the nature of the original message.
For phishing emails, forward them to . For junk or spam emails, forward them to . For legitimate emails incorrectly flagged as spam, forward them to . Copy and paste the original phishing or spam email as an attachment into your new message before sending.
“Reporting phishing and spam emails is a crucial step in maintaining a secure online environment for yourself and others.
Microsoft Security Team
Take Action Now!
Protect your inbox and improve Microsoft's spam filtering.
Install Report Message Add-in
If you use Outlook, install and enable the Report Message add-in to quickly report suspicious emails.
Forward Suspicious Emails
If you don't use Outlook, forward phishing or spam emails to the appropriate Microsoft addresses.
Report False Positives
Help Microsoft improve its filters by reporting legitimate emails incorrectly marked as spam.
False Positives & Negatives Reporting False Positives and Negatives
The system isn’t perfect, and sometimes legitimate emails are incorrectly flagged as spam (false positives), or spam emails slip through the filters (false negatives). The Report Message add-in and forwarding process allow you to report both scenarios.
Reporting false positives helps Microsoft learn and improve its filtering. By providing feedback, you contribute to a more accurate and effective spam detection system, which benefits everyone.