How do I report a fraudulent email to Microsoft so that it can be investigated?

Question

How do I report a fraudulent email to Microsoft so that it can be investigated?

Sean Tomaselli 20

Sean Tomaselli wrote:
How do I report a fraudulent email account to Microsoft so that it can be investigated?

Locked Question. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

Amy Rogers 5 Reputation points

2025-11-25T22:57:19.03+00:00

I have tried to forward a spam email twice to reportphishing@microsoft.com and it has failed both times with the email response of

CH3PEPF0000000B.mail.protection.outlook.com rejected your message to the following email addresses:

reportphishing@microsoft.com (reportphishing@microsoft.com) Your message was rejected by the recipient's domain because the recipient's email address isn't listed in the domain's directory. It might be misspelled or it might not exist.
Richard Delaney 5 Reputation points

2025-12-26T14:22:00.7966667+00:00

reportphishing@microsoft.com is NOT a valid email address
Isaac Brumley 5 Reputation points

2026-02-26T16:31:10.7333333+00:00

I'm guessing this is the new address to report phishing to: **@office365.microsoft.

remove the spaces in the below address as this editor put astericks automatically in the address I typed above.

phish @ office365.microsoft.com

4 answers

Amy Rogers 5 Reputation points

2025-11-25T22:57:19.03+00:00

I have tried to forward a spam email twice to reportphishing@microsoft.com and it has failed both times with the email response of

CH3PEPF0000000B.mail.protection.outlook.com rejected your message to the following email addresses:

reportphishing@microsoft.com (reportphishing@microsoft.com) Your message was rejected by the recipient's domain because the recipient's email address isn't listed in the domain's directory. It might be misspelled or it might not exist.
Richard Delaney 5 Reputation points

2025-12-26T14:22:00.7966667+00:00

reportphishing@microsoft.com is NOT a valid email address
Isaac Brumley 5 Reputation points

2026-02-26T16:31:10.7333333+00:00

I'm guessing this is the new address to report phishing to: **@office365.microsoft.

remove the spaces in the below address as this editor put astericks automatically in the address I typed above.

phish @ office365.microsoft.com

Answer 1

Posted 6 months after the original post so the thread may be locked.

@Sean Tomasellli,

From: https://sendersupport.olc.protection.outlook.com/pm/policies To report unlawful, abusive, unwanted or malicious email that you find originating from an Outlook.com, Hotmail, Live, or MSN account, please forward a complete copy of the abusive message (including the full message header) to abuse[AT]outlook.com Sending these types of communications is a violation of Microsoft policy and appropriate action will be taken on confirmed reports.

Don

Answer 2

John Jefferson Doyon 82,310 Independent Advisor

Hi, I'm John! I will help you with this.

You can forward the fraudulent message to reportphishing@microsoft.com

If you haven't tried already:

Don’t click any links or download attachments in the email.
Open the message, then choose Forward (not reply).
Send it to reportphishing@microsoft.com
After sending, delete the original email from your inbox and also from your Deleted Items folder.

If you think the email tried to access your Microsoft account, it’s a good idea to change your password right away and check your recent sign-in activity at https://account.microsoft.com/security

Let me know if you have any further questions or concerns.

TOM Craig 0 Reputation points

2026-01-20T15:51:41.4866667+00:00
Delivery has failed to these recipients or groups:

reportphishing@microsoft.com Your message was rejected by the recipient's domain because the recipient's email address isn't listed in the domain's directory. It might be misspelled or it might not exist. Try to fix the problem by doing one or more of the following:

Send the message again - delete and retype the address before resending. If your email program automatically suggests an address to use, don't select it - type the complete email address.

Clear the recipient Auto-Complete List in your email program by following the steps in [this article](https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3FLinkId%3D532972&data=05%7C02%7C%7C95bcb5ebb3aa4d8cc72008de583b7e4d%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C639045209706298680%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=4ZrKWCK8cy35MZa%2Fm8Cq45X9MpYtlUtDogPQx4vdHcY%3D&reserved=0"Protected by Outlook: https://go.microsoft.com/fwlink/?LinkId=532972. Click or tap to follow the link."). Then resend the message.

For Email Administrators Directory based edge blocking is enabled for the recipient's organization and the recipient wasn't found in their directory. If the sender is using the correct address but continues to experience the problem, contact the recipient's email admin and tell them about the problem. To fix this they should resynchronize their on-premises and cloud directories.

The following organization rejected your message: CH3PEPF00000015.mail.protection.outlook.com.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Bob Lewandowski 0 Reputation points

2026-01-25T00:02:24.25+00:00

'reportphishing@microsoft.com' doesn't work. I tried twice both were rejected.

Microsoft Outlook MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@sct-15-20-9412-4-msonline-outlook-be315.templateTenant

Delivery has failed to these recipients or groups:

'reportphishing@microsoft.com' Your message wasn't delivered because the recipient's email provider rejected it.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Answer 3

Sandra Baker 0

Someone has made an email using outlook.com in my name how to a get it mark spam

Stefan Blom 347.8K Reputation points MVP Volunteer Moderator

2026-04-13T18:41:54.9933333+00:00

@Sandra Baker, please start a separate thread for your question. Use the Ask a question button at the top of the Q&A page. Good luck. (The current thread is old and it will be closed.)

Answer 4

Stefan Blom 347.8K MVP Volunteer Moderator

See https://support.microsoft.com/en-us/office/report-phishing-9ba3ea70-1169-4993-801b-ec2bb8fc071d .

0 comments