Account Security Problems

How to Report Suspected Malware or Phishing Emails in Outlook

Amos Gikunda Oct 19, 2026 868 views

Question details

The user needs to know how and where to report suspicious emails containing potential malware or phishing attempts in Microsoft email services.

How to Report a Suspected Malware or Phishing Email in Outlook

Product: Outlook.com and Microsoft 365
Device & OS: not provided
Scenario: Receiving a suspicious email that appears to be a phishing attempt or contains potential malware.
Observed behavior: The user wants to safely report the email to Microsoft to prevent security risks, especially when standard add-ins might be unavailable.

Before you start

Do not click any links, open any attachments, or reply to the sender of the suspicious email. Ensure your antivirus software is active before interacting with the message interface.

Solution 1Recommended

Use the Built-in Report Option in Outlook

The safest and most direct way to report phishing is by using Outlook's built-in junk or report message feature.

Microsoft 365 and Outlook.com provide native add-ins to quickly flag harmful emails. This action helps improve global spam filters and immediately removes the threat from your inbox.

Select the suspicious email

Click once on the suspicious email in your inbox to select it. Do not double-click to open it fully or interact with the email body.

Locate the Report Message button

Navigate to the top ribbon in Outlook and look for the 'Report Message', 'Report', or 'Junk' button.

Submit the report

Click the button and select 'Phishing' or 'Junk' from the dropdown menu to send the report directly to Microsoft.

Use the Built-in Report Option in Outlook

Safety Tip: Reporting the email will usually automatically move it to your Deleted Items or Junk folder. Empty your Deleted Items folder afterward for extra security.

Solution 2

Forward the Email to Microsoft's Phishing Team

If the Report Message add-in is unavailable or disabled by your organization, you can manually forward the email to Microsoft's dedicated reporting address.

Free Microsoft Office alternative

Experience a Secure and Lightweight Office Suite with WPS Office

While securing your email communication is crucial, handling your local documents safely is just as important. WPS Office offers a robust, highly secure, and lightweight alternative to Microsoft Office, ensuring your productivity is safe from heavy resource usage and macro-based threats.

1. Download the installer: Visit the official WPS Office website to download the free installation package for your device.
2. Install the suite: Run the installer and follow the on-screen instructions to set up WPS Office.
3. Open your files safely: Open any existing Microsoft Office documents directly in WPS Office without losing formatting.

Completely free and lightweight office suiteFull compatibility with Microsoft Word, Excel, and PowerPoint formatsNo ad-clutter or unnecessary background syncing processesEnhanced local document security and familiar user interface

microsoft office alternative - wps office

Frequently Asked Questions

What happens when I report an email as phishing in Outlook?

When you report an email as phishing, a copy of the message is sent to Microsoft to help update their spam filters and protect other users globally. The email is then automatically moved to your Deleted Items folder.

Can I get a virus just by opening a phishing email?

Generally, simply opening an email will not infect your computer, provided your email client is up to date and does not load external content automatically. However, clicking on suspicious links or downloading attachments can trigger malware downloads. Always delete suspicious emails without interacting with their contents.

What should I do if I accidentally clicked a link in a phishing email?

If you clicked a malicious link, immediately disconnect your device from the internet to prevent data transmission. Run a full system anti-virus scan, and change the passwords for your critical accounts (especially if you entered any login credentials on the fake site).

Why is the Report Message add-in missing in my Outlook?

The add-in might be disabled by your organization's IT administrator, or you may be using an older version of Outlook. You can try enabling it via the 'Get Add-ins' menu on the ribbon, or simply forward the email directly to Microsoft's phishing address instead.

Microsoft Office Security Issues