Report email with Advanced Email Security
With Advanced Email Security, all incoming email is flagged with a banner informing the recipient of its threat level. Neutral (gray), Caution (yellow), and Danger (red) are all possible threat categories.
Neutral banners mean the message came from an external sender but doesn't appear to be a threat.
Caution banners are shown when Advanced Email Security found something unusual that you should be aware of. These might not be dangerous, such as a first-time sender, but the message should be treated with caution.
Danger banners indicate that Advanced Email Security believes the message is suspicious and could be a phishing attempt. Possible reasons for this banner include brand impersonations, blacklisted phishing URLs, or attempts to spoof mail so it looks like it came from an internal company account. Your security team or email administrator can configure your server to automatically quarantine these dangerous emails.
If you receive an email and the banner isn't showing the right threat level, report the email to improve Advanced Email Security.
- Select Report This Email below the banner to view the Report This Email Page. You might need to sign in to Advanced Email Security by selecting Sign in with Microsoft.
- (Optional) Add your contact email address and any additional comments.
- Choose if you'd classify this email as Safe, Spam, or Phishing.
- Confirm that Send raw message for analysis is selected, then if applicable, select the boxes for I clicked a link and I opened an attachment.
- Depending on how you classified the message, you may have the option to add the email or domain to an Allow or Block list.
- Select Submit. This information is used to help Advanced Email Security improve how it flags messages in the future.
If the email includes a suspicious link that you or another user opened, Advanced Email Security will stop you from continuing to the malicious site.