Where do I forward Microsoft phishing emails?

Where to Forward Microsoft Phishing Emails

1. Microsoft’s Official Reporting Email
   • Forward the phishing email to report@phishing.microsoft.com.
   • This helps Microsoft investigate and block future phishing attempts.
2. Your Organization’s IT or Security Team
   • Send the phishing email to your internal IT or cybersecurity team for immediate action.
   • They can block malicious domains and educate employees about similar threats.
3. Anti-Phishing Services
   • If your organization uses a third-party anti-phishing service, forward the email to the service’s designated address.

How to Forward a Phishing Email Correctly

To ensure the report is useful:

1. Do Not Click Any Links: Avoid interacting with the email content.
2. Forward the Email as an Attachment:
   • This preserves important metadata that Microsoft or your security team can use for analysis.
   • Instructions:
     • Outlook Desktop: Select the phishing email, then click Home > More > Forward as Attachment.
     • Outlook Web App: Right-click the email, select Forward as Attachment, and send it to the reporting address.

Other Actions to Take

1. Mark the Email as Phishing in Outlook:
   • Select the email, click on Report Message (in the toolbar or under the three-dot menu), and choose Phishing.
   • This informs Microsoft directly and adds the sender to their blacklist.
2. Delete the Email:
   • After reporting, delete the email from your inbox to prevent accidental interaction.
3. Run a Security Check:
   • If you suspect your account may have been compromised, change your password immediately.
   • Enable two-factor authentication (2FA) for added security.

Follow-Up Resources

• Microsoft provides guidance on reporting phishing here: Microsoft’s Phishing Resource.
• Check your account activity via Microsoft Account Security.

Read More:

What is smishing and phishing?

How is my employees getting phishing messages from WhatsApp?

Spear Phishing Email: A Dangerous Threat

Where do I forward Microsoft phishing emails?

What makes a BEC attack different than a typical phishing email?

How to report phishing in Outlook? Just in 1 Click