Reporting Phishing Emails Using KnowBe4's Hybrid Phish Alert Button

Purpose: This KB article will guide users on how to report phishing emails using KnowBe4's Hybrid Phish Alert Button across different versions of Outlook, including New Outlook, Classic Outlook, iOS, and Android.

Table of Contents

1. New Outlook
2. Classic Outlook
3. Outlook on iOS
4. Outlook on Android

New Outlook

1. Open the Phishing Email:

   • Navigate to your inbox and open the email you suspect is a phishing attempt.

2. Locate the Phish Alert Button:

   • The Phish Alert Button (PAB) should be visible in the ribbon at the top of the email window.

   

3. Report the Email:

   • Click on the Phish Alert Button.
   • A confirmation dialog will appear. Click Report to submit the email.

   

Classic Outlook

1. Open the Phishing Email:

   • Navigate to your inbox and open the email you suspect is a phishing attempt.

2. Locate the Phish Alert Button:

   • The Phish Alert Button (PAB) can be found in the toolbar at the top of the email window.
   

3. Report the Email:

   • Click on the Phish Alert Button
   • 
   • A confirmation dialog will appear. Click Report to submit the email.
   • 

Outlook on iOS

1. Open the Phishing Email:

   • Navigate to your inbox and open the email you suspect is a phishing attempt.

2. Locate the Phish Alert Button:

   • Tap the More Options (three dots) icon at the top-right corner of the email.

   

3. Select Phish Alert Button:

   • Scroll down and tap on the Phish Alert Button.

   

4. Report the Email:

   • A confirmation dialog will appear. Tap Report to submit the email.

   

Outlook on Android

1. Open the Phishing Email:

   • Navigate to your inbox and open the email you suspect is a phishing attempt.

2. Locate the Phish Alert Button:

• Tap the More Options (three dots) icon at the top-right corner of the email.

3. Select Phish Alert Button:

   • Scroll down and tap on the Phish Alert Button.

   

4. Report the Email:

   • A confirmation dialog will appear. Tap Report to submit the email.

   

What Happens Next?

After clicking Report, here's what you can expect:

• The email is removed from your inbox. The reported email will no longer appear in your inbox. A copy is automatically forwarded to Pitt's security team for review.
• You'll see a confirmation message. A brief on-screen response will confirm that your report was successfully submitted.
• The security team reviews your submission. Reported emails are sent to Pitt Digital's security operations team via the PHISHER platform, where they are triaged and investigated.
• No further action is required from you. Once submitted, you do not need to follow up or send any additional information unless contacted by the security team.

Accidentally reported a legitimate email? Don't worry — you can retrieve it from your Deleted Items folder in Outlook.

Not sure if an email is a phishing test? KnowBe4 is used to send simulated phishing emails as part of Pitt's security awareness program. Whether the email turns out to be real or a test, reporting it is always the right call. The PAB tracks test reports and they are factored into your security awareness training record.