MIcrosoft Copilot 365: Reporting a Phish using the Report Message Button

Reporting a Phish using the "Report" Button

NOTE: The "Report Message" is no longer supported by Microsoft.

What is the Report Button?

Users of Duke's Microsoft 365 Copilot Exchange Online system can report suspicious emails to OIT and the Duke IT Security Offices with one click of a button. This is the Report button which is part of our Microsoft mail system.

The IT Security Offices and OIT are encouraging users to use the new “Report” button to report any suspicious email instead of submitting a ticket or emailing the security@duke.edu list.

What does it look like and what clients are supported?

The new “Report” button is available in all recent Outlook email clients (Classic Outlook and Outlook (M365) as well as Outlook for Mac, Outlook Web Access (OWA), Outlook Mobile App (Android and iPhone), Microsoft 365 Copilot Desktop Client).  The button looks generally like the shield below. Mobile devices do not use Outlook as their native client and therefore are not able to support the "Report" button. Microsoft Outlook (for mobile) can be installed through the Apple App Store or through the Google Play Store.

 

What happens when I click the "Report" button?

After clicking the button, you will receive a popup message saying thanks for reporting. Select “OK” to confirm submission. Once the report is submitted, the suspicious email will be moved to your “deleted” folder. The dialog boxes displayed look as follows:

 

 

Where can I find the button in my client?

Generally speaking, the button will be found on the ribbon of the client.  See the screen captures below for information on your particular client.  

 

 

Outlook O365 Desktop Client (Windows & Mac):

The button can be found in the middle of the ribbon of the client.

Within the message view window, the button is in the same location. If the button is missing, please restart the Outlook application. It should return. 

 

 

 

Outlook on the Web (OWA):

You can find the button in Outlook on the Web in a couple of places depending on your settings.

 

Outlook on the Web - Message Ribbon:

 

Outlook on the Web on Mobile:

It is recommended that you download the Outlook app instead of using OWA via a mobile browser. 

Outlook Mobile Apps:

In both Outlook for Android and Outlook for iOS, the button can be found in when previewing a message. Click on the three dots on bottom of the message, and then click on "Report Phishing or Report Junk" from the menu. Select “Report Phishing” to send the message to security.  Click OK on the "Thanks for Reporting" screen.