To report that message without digging into headers or accidentally mailing it to yourself, use the built‑in reporting features instead of forwarding it:
- In Microsoft 365 Outlook or Outlook.com, select the suspicious message in your mailbox.
- On the ribbon, choose Report > Report phishing.
- This both reports the message and removes it from the Inbox, and it sends the full original (including headers) to Microsoft automatically, so there is no need to forward it or copy headers.
If using another email client and headers are really needed, attach the original message instead of forwarding it:
- Create a new email.
- Attach the suspicious email as a file (do not forward it inline).
- Send it to ******@office365.microsoft.com.
- Attaching preserves the full headers for analysis and avoids sending a “cleaned” copy to yourself.
If the message is clearly a scam and no further analysis is needed, it can also simply be marked as junk/spam in the client, which helps train filters.
References: