Deleted phishing email

Question

I need to recover a phishing email that was sent to me and deleted when I reported it

Answer 1

Hi, I'm John! I will help you with this.

First, did you report the email using “Report Phishing” in Outlook?

Or did you delete it manually?

• Please try this: Open Outlook. > Go to Deleted Items. > Check if the email is still there.
• If not, then: > Go to Deleted Items. > Click Recover items deleted from this folder (at the top). > Look for the email and restore it.

---

Important:

• If you reported it as phishing, Microsoft may have permanently removed it for security. In that case, it usually cannot be recovered.

---

Click "Add comment" to let me know.

Regards,

John J.D.

Answer 2

To recover a deleted phishing email, you will need to check if the email is still within the retention period for deleted items. If you are using Outlook or Outlook on the web, you can try the following steps:

1. Use the Recover Deleted Items feature: This feature allows you to recover items that have been deleted from your mailbox. In Outlook, navigate to the Deleted Items folder, and look for an option to Recover Deleted Items. This option may also be available in the Outlook on the web.
2. Contact your administrator: If the email was permanently deleted (purged), you may need to contact your email administrator. They can recover purged messages if the deleted item retention period has not expired.
3. Check the Recoverable Items folder: If single item recovery is enabled, deleted items may be moved to the Recoverable Items folder, where they can be accessed by an administrator for recovery.

If you are unable to recover the email yourself, your administrator can assist you in searching for and recovering the deleted email from the mailbox.

---

References:

• Recover deleted messages in a user's mailbox in Exchange Online
• Recover deleted messages in a mailbox in Exchange 2013