How to report phishing emails when we dont have email header file and images

kadali kishore 0 Reputation points
2026-09-16T08:42:51.64+00:00

Hi Team,

I wanted to report [Moderator Note: Personal Info Removed]@spiceimporter.com, where the sender is impersonating an organization and sending fraudulent emails.

We are currently reporting these cases to ******@outlook.com because the domain uses Microsoft/Outlook mail exchange infrastructure. However, we have not been receiving responses or seeing action on the reported emails, even when we provide clear supporting evidence.

Since these reports are being submitted to us by our customers, we want to make sure we are using the correct Microsoft/Outlook abuse escalation process to report the malicious sender and request suspension or other appropriate action.

Could you please advise:

  • What is the recommended way for a third party/brand-protection team to report a malicious email directly to Microsoft for investigation?
  • Is there a dedicated Microsoft abuse/phishing submission portal or escalation channel for full email/header-based reports?
  • Can we submit the original email or .eml/header file as evidence and request action against the associated mailbox/domain?
  • Is ******@outlook.com still the appropriate channel for these types of reports, or is there a newer/recommended process?

We are specifically looking for the Microsoft-side reporting/escalation process, rather than the standard Outlook user reporting workflow.

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments No comments

3 answers

Sort by: Newest
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

  2. EmilyS726 266.8K Reputation points Independent Advisor
    2026-09-16T12:17:44.87+00:00

    You can go here: https://msrc.microsoft.com/report/

    Scroll down and use the Outlook Spam to report impersonation.

    Or, is this happening to your Microsoft 365 business users? If so, administrator user has another option via Microsoft Defender > Email & collaboration > Submissions

    Microsoft can investigate and take action under its service policies, but the reporter should not expect Microsoft to disclose whether a particular mailbox or tenant was suspended.

    Was this answer helpful?

    0 comments No comments

  3. kadali kishore 0 Reputation points
    2026-09-16T08:51:43.8466667+00:00

    we have used abuse@microsoft.com as well

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.