Report a suspected phishing email

If an email feels off (an unexpected invoice, a "your password expires today" warning, a shared document you weren't expecting, a supplier suddenly changing bank details), don't click links, open attachments or reply. Report it instead. Not sure what to look for? See how to spot a phishing email.

Use the Report button in Outlook

Current versions of Outlook (the new Outlook for Windows, Outlook for Microsoft 365, Outlook on the web, Outlook for Mac, iOS and Android) include a built-in Report button.

1. Select the suspicious message. Don't open attachments or links.
2. Select Report in the toolbar or message menu.
3. Choose Report phishing. Use Report junk for spam that's annoying but not malicious.

A message reported as phishing is removed from your mailbox and, depending on how your organisation is configured, sent to your security team, to Microsoft, or both. Microsoft's own guide is on Microsoft Learn.

If you can't see a Report button

Your organisation may use a different reporting add-in, or reporting may be set up differently. Forward the email as an attachment to support@synfo.com.au and we'll take it from there. Forwarding as an attachment keeps the technical details we need to investigate.

In most versions of Outlook, you'll find Forward as attachment under the More actions (three dots) menu or next to the Forward button. The exact location varies between versions.

Text, Teams and phone scams

Phishing doesn't only arrive by email. If you get a suspicious text message, Teams message or phone call asking for passwords, codes or payments, don't respond. Let us know by emailing support@synfo.com.au, with a screenshot if you can.

Already clicked a link or entered your password?

If you're emailing about phishing or a suspicious payment request, put P1 in the subject line.

Still stuck?

If you're unsure whether an email is genuine, forward it as an attachment to support@synfo.com.au and ask before you act on it.