How To Enable Microsoft’s ‘Report Phishing’ add-in to Outlook

Microsoft’s ‘Report Phishing’ add-in allows you to report any phishing emails you may receive. Reporting these phishing, or suspected phishing emails, allows Microsoft to stop scammers, so it’s important to use the add-in and encourage use within your business

You can also Include the NCSC’s SERS in the Report Phishing add-in

The NCSC’s SERS (Suspicious Email Reporting Service) allows you to report suspicious emails to them by sending them to report@phishing.gov.uk. They will then analyse the emails, and if any malicious links are found they will try and remove these sites.

Including the NCSC’s SERS in the Report Phishing add-in means that all emails you flag with the ‘Report Phishing’ button will go to the NCSCs SERS.

How to Include the NSCS’s SERS

1. Login into the Microsoft 365 Admin Centre
2. Go to the Exchange Admin Centre 
3. Then go to Mail Flow -> Rules
4. Click in ‘create new rule‘ button. You should then see a ‘New Rule‘ window be displayed. 
5. Enter a name for your rule such as ‘Report Phishing to SERS’
6. Set Apply this rule if to The recipient is phish@office365.microsoft.com
7. Then set Do the following to Bcc the message to report@phishing.gov.uk
8. Finally click Save. Once saved, any emails you flag as ‘Report Phishing’ will go to the NSCS’s SERS. 

How to Report a Suspected Phishing Email

Once you have set up the ‘Report Phishing’ add-in, you will be able to see it in Outlook.

However, if you are using the full Outlook programme, you’ll find the button in the main toolbar instead 

To report an email, simply click the button. You will be asked to confirm your submission, and once confirmed the email will be reported.

Read about how to spot a potential phishing email here