Recognize and report a suspicious email
Email users; Outlook reporting option where available
When to use this: Recognize and report a suspicious email — use these initial checks when this matches your situation. On a work or school device, follow your organization's policies and stop if a setting is managed.
- Pause if a message pressures you to pay, sign in or open an attachment.
- Do not use its links or contact details to verify it.
- Contact the sender through a number or address you already trust.
- In supported Outlook versions, select the message and use Report, then Report phishing.
- For work messages, follow your organization’s reporting process.
Check the result: The message is reported without interacting with its request.
Stop and get help when needed: If you already entered a password or opened a suspicious file, notify your security contact promptly. Do not forward private message contents to public forums.
Need hands-on help?: Request DefenderTech support for individualized investigation or changes. We will explain the scope and estimate and ask for authorization before paid work begins. Do not include passwords, recovery keys or verification codes in your request.
Official references: - Microsoft guidance: https://support.microsoft.com/en-us/security/protect-yourself-from-phishing
Updated 2026-09-30