SPAM & Phishing reporting procedures : The Phish Alert Button

The following process is to be used for reporting unwanted email that pertains to one of the following categories:

1. Attempts to gain credentials
2. Unsolicited business related email
3. Technology requests
4. Fake invoice attempts

Steps for reporting SPAM (or any of the above) using the Phish Alert Button (PAB) on the Outlook Client

1. Select the email within the folder that you suspect is SPAM

   

2. When you have the email selected, click the Phish Alert Button
   

   

3. Once you click the Phish Alert Button, a new window will appear to confirm what you are about to submit.
4. 
5. Click Phish Alert at the bottom. This will send the suspicious email to the DDC Security team for review. 

Steps for Reporting SPAM using the Phish Alert Button in Microsoft 365 (Outlook Web App/OWA)

If you use Microsoft 365, follow the steps below to report an email with the PAB:

1. 1. Open the email that you would like to report.
2. 2. Click the Apps icon in the top-right corner of the email to open the Apps launcher. Or, click the ellipsis icon (...) and select Apps.
3. 3. From the Apps launcher that opens, click the Phish Alert add-in.
4. Note:If the PAB add-in is not displayed in the Apps launcher, click Add apps. Then, locate and add the PAB add-in.You can also pin the PAB add-in to the toolbar at the top of an open email. To pin the add-in, click the ellipsis icon and select Customize actions. Or, navigate to Settings > Mail > Customize actions. Then, select the Phish Alert add-in and click Save. 
5. 
6. 4. In the prompt that opens, click Phish Alert again to report the email.
7. Note: If we have enabled the Comments and Dispositions setting for the PAB, you can select a disposition from the Email Classification section. The Unknown option is selected by default. You can also enter a comment about the email you are reporting. Then, click Phish Alert.
8.  
9. 
10. 5. After you click Phish Alert again, a message will display to confirm that you reported the email. This message will tell you if the email you reported was a simulated phishing attack or if the email will need to be reviewed by your IT team. To close this message, click Ok.

Reporting SPAM Using the Phish Alert Button (PAB) in the Microsoft Outlook Mobile App for Android

If you use the Microsoft Outlook app for Android, follow the steps below to report an email:

1. 1. Open the email that you would like to report.
2. 2. Click the vertical ellipsis icon (...) at the upper right corner of the email. Check the rest of the screen if you do not see the button in this location.
3. 3. Click the Phish Alert icon.
4. 4. In the pop-up window that opens, click Phish Alert to report the email.
5. Note: If we have enabled the Comments and Dispositions setting for the PAB, you can select a disposition from the Email Classification section. The Unknown option is selected by default. You can also enter a comment about the email you are reporting. Then, click Phish Alert.
6. 
7. 5. After you click Phish Alert again, a message will display to confirm that you reported the email. This message will tell you if the email you reported was a simulated phishing attack or if the email will need to be reviewed by your IT team. To close this message, click Ok.

Reporting Spam Using the Phish Alert Button (PAB) in the Microsoft Outlook Mobile App for Apple iOS

If you use the Microsoft Outlook app for Apple iOS, follow the steps below to report an email:

1. 1. Open the email that you would like to report.
2. 2. Click the ellipsis icon (…) at the upper right corner of the email.
3. 3. Click the Phish Alert icon.
4. 4. In the pop-up window that opens, click Phish Alert again to report the email.
5. Note: If we have enabled the Comments and Dispositions setting for the PAB, you can select a disposition from the Email Classification section. The Unknown option is selected by default. You can also enter a comment about the email you are reporting. Then, click Phish Alert.
6. 5. After you click Phish Alert again, a message will display to confirm that you reported the email. This message will tell you if the email you reported was a simulated phishing attack or if the email will need to be reviewed by your IT team. To close this message, click Ok.