Using Outlook Desktop Client.

1. Select an email you believe to be suspicious and click the Phish Hook button on the top ribbon in the 'Home' tab.
   • This will open up a new dialogue box on the right displaying the details of the email and asking for confirmation to report it. 

2.    Click the 'Caught one!' button to send the potentially dangerous email to your IT team for analysis.

• After a few seconds you will see a success message at the bottom of the dialogue box and the email will be deleted from your inbox

Using Outlook Web Access

You will see it in your Outlook web window, under the main email drop-down menu

1. Select an email you believe to be suspicious and click the ellipsis ('...').
2. Click 'More apps'
3. Click "Phish Hook".
   • This will open up a new dialogue box on the right displaying the details of the email and asking for confirmation to report it. 

4. Click the 'Caught One!' button to send the potentially dangerous email to your IT security contact for analysis.

• After a few seconds you will see a success message at the bottom of the dialogue box and the email will be deleted from your inbox.

Please remember that you are the first and last line of defence against phishing attacks in our company!

By reporting suspicious/malicious emails, your IT team are better able to analyse which emails are getting through the company's defences. This allows our company to better secure itself against ongoing phishing attacks and similar email attacks.

The reporting process also keeps you actively engaged in the security of our company, this point is key as a significant part of the culture shift towards a cyber-secure organisation is having all users actively engaged in a security-first mindset.