How to Use the Phish Alert Button in Outlook

Click the PAB if you believe you have received a phishing email or any potentially dangerous email. Any emails you report using the PAB will be automatically deleted from your inbox. The emails you report will also be forwarded to a designated contact within your organization for analysis.

The PAB should only be used to report emails you believe to have malicious intent. If you are receiving spam or marketing emails, you should not use the PAB to report these. You can delete these types of emails or add the sender or sender's email domain to a block list. 

How Do I Use It?

Once the PAB add-in is installed, you will see the PAB in one of two ways:

1) The PAB add-in will appear at the top of your Outlook client.

In this view, to report an email as a phishing email:

1. Click the Phish Alert button while the email is open.
2. A prompt will ask you if you want to report the email as a phishing email. Click Yes to report the email, or click No to not report the email.

 

2) The PAB add-in will appear as a clickable Phish Alert tab in any opened email.

In this view, to report an email as a phishing email:

1. Click the Phish Alert tab to open a drop-down screen.
2. A prompt will ask you if you want to report the email as a phishing email. Click the Phish Alert button to report the email.

Note:

Using either method, the email you report will be forwarded to an email address designated by your organization and then deleted from your inbox. If you report an email in error, you can retrieve the email from your Trash/Deleted Items.

 

Microsoft 365 – Webmail - OWA

Once the PAB add-in is installed, the PAB icon will appear in the drop-down menu of an open email.

To report an email as a phishing email:

1. Click the PAB icon. 

2. A sidebar prompt will ask you if you are sure you want to report the email as a phishing email. Click the Phish Alert button to report the email. 

3. After clicking the Phish Alert button, you will be notified whether the phish was simulated or was malicious in nature. 

 

Outlook Mobile App (Android)

To report an email as a phishing email:

1. On any open email, tap the three dots at the top-right of the screen. 

2. The Phish Alert add-in will appear. Tap the Phish Alert add-in. ** If you don’t see it close the Outlook app and reopen.

2. A prompt will ask you if you are sure you want to report the email as a phishing email. Tap the Mobile Phish Alert button to report the email. 

 

3. If you have successfully reported a simulated phishing email sent on behalf of your organization, a congratulatory message will display. Click OK to close it. 

 

Outlook Mobile App (iOS)

To report an email as a phishing email:

1. On any open email, tap the three dots at the top-right of the screen. 

3. The Phish Alert add-in will appear. Tap the Phish Alert add-in.  ** If you don’t see it close the Outlook app and reopen.

3. A prompt will ask you if you are sure you want to report the email as a phishing email. Tap the Phish Alert button to report the email. 

 

4. If you have successfully reported a simulated phishing email sent on behalf of your organization, a congratulatory message will display. Click OK to close it.