Sending, receiving, and organizing email in Outlook on the web for business
Use Outlook’s built-in phishing reporting instead of forwarding the scam message.
In Outlook.com or Microsoft 365 Outlook:
- Select the suspicious message.
- Choose Report > Report phishing from the ribbon.
- This reports the message, removes it from the Inbox, and helps improve filtering.
If using an email client other than Outlook, send the phishing message as an attachment in a new email to ******@office365.microsoft.com. Do not forward it normally, because the original message headers are needed for analysis.
For why a message can be received but a forwarded copy is blocked: Microsoft’s anti-spam system can block messages based on the content and characteristics of the message being sent. The anti-spam guidance states that legitimate email can also be flagged because of filtering verdicts, policy overrides, or authentication-related issues, and message trace can be used to investigate what happened to a message.
If this is a Microsoft 365 business mailbox, an admin can investigate in:
- Exchange admin center > Mail flow > Message trace to see which rule or policy flagged the message.
- Review anti-spam policies, mail flow rules, and blocked senders settings.
- Submit the message to Microsoft for analysis.