microsoft forms blocked

Question

how do i get access to the 365 admin center? it's blocking my form for phishing

Answer 1

Hi K Black,

Thank you for the information.

Since the form was created using a personal Microsoft account, you would not normally have access to the Microsoft 365 Admin Center or Microsoft Defender portal, as those tools require a Microsoft 365 business/school tenant with the appropriate administrator permissions.

The message shown in the screenshot indicates that the account associated with the form has been blocked by Microsoft Forms due to a potential phishing detection. Issues involving blocked Forms or phishing false positives for personal accounts aren't handled by through Microsoft Defender administration.

As a potential workaround, you may try recreating the form using the steps below:

1. Create a copy of the form (... > Make a copy).
2. Rename the copied form and review the content for any wording that could be interpreted as security- or account-related.
3. Consider avoiding phrases such as:

• "Verify your account"
• "Confirm login"
• "Security check"

4. Publish the newly created form and test access again.

In some cases, a copied form receives a new form ID, which may help if the original form was flagged by an automated detection process. However, this is not a guaranteed resolution since the form could be blocked from other reasons others than being automatically flagged by Microsoft's security systems when their content resembles common phishing patterns. This may occur if the form contains wording related to passwords, account verification, payments, one-time passcodes (OTP), or banking information. Forms that request excessive personal information, such as multiple email address or phone number fields, may also trigger additional scrutiny. Additionally, including URLs that resemble sign-in pages or could be interpreted as attempting to collect credentials may increase the likelihood of the form being blocked.

However, if the issue persists after trying the above steps, please consider creating a new form using a different Microsoft account. This will help determine whether the issue is specific to the original account or the form itself. If the new form works as expected, it may indicate that the original account has been restricted or flagged by Microsoft's automated security systems.

I hope this provides enough clarity and helps you stay inform with your current situation.

In the meantime, if you see my replies bring helpful information, please kindly accept it as an answer and vote it up by your original account, which raised this question. Once marked, it will automatically pin to top. As other users will also search information in this community, your valuable vote up will definitely also help other users who have similar queries easily to find the correct channel and useful information more quickly.   

 

Thank you for your patience and your understanding. If you have any questions or need further assistance, please feel free to share them in the comments on this post so I can continue to support you.   

---

Note: Follow the steps in this documentation to enable email notifications if you want to receive email notifications related to this topic.

Answer 2

Hi K Black,

If you're trying to review phishing submissions, you typically need either a Global Administrator, Security Administrator, or Security Operator role in your Microsoft 365 tenant. Microsoft's phishing submission features are managed through the Microsoft Defender portal rather than the standard Microsoft 365 Admin Center. The Submissions page allows administrators to review and submit suspected phishing messages for analysis.

For reference: Manage submissions - Microsoft Defender for Office 365 | Microsoft Learn

However, I want to understand your situation better to assist you with more accuracy, could you please provide me some additional information about this issue:

1. When you say it's "blocking my form for phishing," what exact error message are you seeing?
2. Are you unable to access:

• The Microsoft 365 Admin Center (admin.microsoft.com)?
  • The Microsoft Defender portal (security.microsoft.com)?
  • A phishing submission form or "Report phishing" page?

1. Are you using a work/school account (@yourcompany.org, @onmicrosoft.com...) or a personal Microsoft account (hotmail, gmail, outlook.com...)?
2. Do you know whether your account has any admin role assigned?

If you're receiving an Access Denied message, it's often because the account doesn't have the required admin/security role, even if you can sign in successfully. If you're the tenant's administrator but cannot access the Admin Center at all, you may need another Global Admin to grant permissions or contact Microsoft support if you've lost admin access as a sole admin.

Once I have a clearer understanding of your current situation, I’ll be happy to assist you with greater accuracy. Please feel free to share any additional details you believe are relevant. Screenshots are especially helpful and much appreciated.

 

Thank you for your patience and your understanding. If you have any additional questions, please feel free to reach out. 

I'm looking forward to your reply. 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.