Deploy the Phishing Reporter and clean up a reported phish

Steps

1. Connect Microsoft 365. Needed for the add-in and mail removal
2. Deploy the Outlook add-in. Add-in Setup tab; appears within 24 hours
3. Set notifications. Settings: who is told, where mail goes
4. Review the report. Open Report Detail and set the type
5. Is it phishing?. Check score, links and authentication
6. Search every mailbox. Delete Phish by sender, domain or subject
7. Approve removal. Junk, Deleted Items or hard delete
8. Block the sender. Add a block rule in Sender Rules

Articles for the pages in this guide

• Connect Microsoft 365
• Delete Phish
• Phishing Reporter
• Security Review

← All task guides