Configuring a Microsoft 365 "Report Message" button

This page applies to:

• Microsoft 365 organizations with mailboxes in Exchange Online
• Microsoft 365 Inline and Microsoft 365 API integrations

The Microsoft built-in and add-in "Report Message" buttons enable end-users to report phishing and suspicious email in Outlook, that is, to report an email message that they think may be junk or phishing. They can also report an email as being "not junk" - that is, a false positive [clean]. 

By default, when an end-user uses the "Report Message" button, the resulting report is sent to Microsoft only. You can configure Microsoft 365 in your organization so that each time one of these reports is sent to Microsoft, a copy of the report is sent to Perception Point as well. This enables the Perception Point IR Team to then analyze the reported email, and take the necessary actions. 

By default, the Perception Point IR Team won't send feedback to the end-users that report email messages. However, you can request Perception Point Support to configure your organization so that the Perception Point IR Team will send feedback emails to the end-users that report email messages.

The procedures described on this page use the Microsoft Report Message built-in and add-in  functionality.

Perform the following steps to configure the Microsoft 365 "Report Message" button to send the reports to Perception Point as well:

Step 1: Configuring a mailbox for reported messages 

1. In the User reported settings page, under "Reported message destinations":
   1.  From Send reported messages to, select either "My reporting mailbox only" or "Microsoft and my reporting mailbox".
   2. Under Add a mailbox to send reported messages to, enter the dedicated mailbox that you created above.

Step 2: Creating a mail flow rule 

Create a rule in the Microsoft 365 Exchange Admin Center, that will send reported messages to Perception Point - using the bcc mechanism.

1. Open the Microsoft 365 Exchange Admin Center [https://admin.exchange.microsoft.com].
2. In the left navigation panel, click Mail flow > Rules.
3. Click Add a rule > Create a new rule. 
4. In the Set rule conditions page that opens, configure the following settings:
   1. Name: Submissions to Perception Point
   2. Apply this rule if > The recipient > is this person, and then enter your new dedicated mailbox - that you opened in Step 1 above: for example, reported-messages@acme.com

1. Under Do the following 
   1. Select Add Recipients > to the Bcc Box
   2. Click Select one... and then specify one of the email addresses below: [See the drop-down below for details on on how to determine your environment]

No changes are required on this page.

Review the settings.

Step 3: Requesting feedback emails [Optional] 

By default, the Perception Point IR Team won't send feedback to end-users that report email messages using the Report Message button. However, you can request Perception Point Support to configure your organization so that the Perception Point IR Team will send feedback to end-users that report email messages.

To request feedback emails:

You can include the text template below in your email:

After you receive confirmation from Perception Point Support, the the Report Message button should be configured and available in your organization.

The procedure below is performed by end-users in Outlook, and includes information about what happens after a message is reported.

1. In Outlook, open the email that you want to report.
2. Click Report Message, and then select Junk, Phishing, or Not Junk.