How to Report an Email as Phishing or Spam in Outlook

Type: How-to Category: Security & Email Tags: phishing, spam, junk, outlook, email security, report message, suspicious email Audience: All Outlook users (Outlook on the web, new Outlook for Windows, classic Outlook desktop, Outlook mobile) Last updated: April 27, 2026

Overview

This guide shows you how to report a suspicious email as phishing or spam in Outlook. Reporting these messages removes them from your inbox, helps train Outlook's filters, and alerts Microsoft (and your IT/security team) so they can protect other users from the same threat.

Use this article when you receive an email that looks like a scam, asks you to click a suspicious link, requests login credentials, impersonates a coworker or company, or is simply unwanted bulk mail.

Phishing vs. Spam — Which Should I Pick?

Choosing the right category helps Microsoft and your security team respond appropriately.

Report as Phishing when...	Report as Junk/Spam when...
The email impersonates a person, brand, or coworker	The email is unwanted marketing or bulk mail
It asks for passwords, MFA codes, or payment info	It's a newsletter you didn't sign up for
It contains suspicious links or attachments	It's a legitimate sender you no longer want to hear from
It pressures you to act urgently ("your account will be closed")	It's repetitive promotional content
It looks like a fake invoice, shipping notice, or HR/IT message	It's annoying but not malicious

When in doubt, report as phishing. It's better to over-report a suspicious message than to ignore a real attack.

Important: Do not click links, open attachments, reply, or unsubscribe from a suspected phishing email. Clicking "unsubscribe" on a phishing message can confirm your address is active.

Steps

Outlook on the Web (outlook.office.com or outlook.live.com)

Open the message by single-clicking it in your inbox so it appears in the reading pane. Do not click any links or attachments inside the email.
In the message toolbar at the top of the reading pane, click the Report button. If you don't see it, click the three-dot menu (...) and choose Report.
Choose the appropriate option:
- Report phishing — for emails attempting to steal information or impersonate someone
- Report junk — for unwanted spam or bulk mail
- Report not junk — only if a legitimate email was incorrectly flagged
In the confirmation dialog, click Report to send the message to Microsoft and your organization's security team.

You should see a green confirmation banner reading "Thanks for the report" and the message will be moved out of your inbox automatically.

New Outlook for Windows / Outlook for Mac

Select the suspicious email in your message list.
On the Home ribbon, click Report (or Report Message if your admin uses the add-in).
Choose Report phishing or Report junk from the dropdown.
Click Report in the confirmation prompt.

The message is removed from your inbox and forwarded to Microsoft Defender and your IT team.

Classic Outlook for Windows (Desktop)

Select the suspicious email in your inbox.
On the Home ribbon, look for one of the following:
- Report Message button — click it, then choose Phishing or Junk
- Junk dropdown — click it and choose Report as Phishing or Block Sender
Click Report to confirm.

If you don't see a Report Message button, ask your IT administrator to deploy the Microsoft Report Message add-in from the Microsoft 365 admin center.

Outlook Mobile (iOS and Android)

Open the suspicious email by tapping it.
Tap the three-dot menu (...) in the upper right of the message.
Tap Report Junk.
Choose Phishing or Junk from the menu.
Tap Report to confirm.