How to Resolve a Microsoft Form Tagged as Phishing
Question details
The user needs to unblock a Microsoft Form that has been flagged as a phishing attempt and restricted from distribution.

- Product
- Microsoft Forms
- Device & OS
- not provided
- Scenario
- Distributing a form that collects user data
- Observed behavior
- The form is blocked from distribution because it is tagged as potentially fraudulent or asking for sensitive information.
Ensure you have the necessary administrative or ownership rights to edit the form and access your Microsoft account's security settings.
Review Form Content and Request a Microsoft Review
Modify the form to comply with Microsoft policies and submit it for an official review to lift the phishing restriction.
Microsoft uses automated systems to detect potentially malicious forms. If your form requests sensitive data without clear context, it may be blocked automatically.
Log in to your Microsoft Forms account and open the form that displays the phishing warning banner.
Check all questions and remove any unnecessary requests for sensitive or personal information, such as passwords, financial data, or identification numbers.
Insert a clear privacy statement into the form description explaining exactly how the collected data will be used and protected.
Click on the warning banner or the 'Request Review' button provided in the notification to submit your modified form to Microsoft for official review.

Try WPS Office for Secure Document and Data Management
While you are resolving the Microsoft Forms phishing error, consider WPS Office as a lightweight and free alternative for your daily office needs. It provides a secure environment for document creation and data collection with full format compatibility.

Frequently Asked Questions
Why does Microsoft Forms flag forms as phishing?
Forms are flagged by automated security systems when they request sensitive personal information like passwords, credit card numbers, or social security numbers, which violates Microsoft's terms of use.
How long does it take for Microsoft to review a flagged form?
The review process can vary, but it generally takes a few hours to a couple of days. You will be notified once Microsoft has completed the review and removed the restriction.
Can an IT administrator unblock a flagged form?
Yes, if you are using a Microsoft 365 business or education account, your organization's IT administrator can review the blocked form in the Microsoft 365 Defender portal and unblock it if they determine it is safe.
How can I prevent my forms from being tagged as phishing in the future?
Avoid asking for highly sensitive information, ensure your account has a good reputation, and always include a clear privacy statement in your forms explaining the purpose of the data collection.




