Hi Everyone,

A quick but important reminder on the correct way to report suspicious emails.

Always use the KnowBe4 Phish Alert button — not Outlook's built-in "Report" option and not by forwarding the email. When you use the built-in reporting or forward a message, our email security automatically opens and scans the links and QR codes in the background. During our phishing campaigns, that automated scan can be mistakenly logged as you clicking or scanning — creating a false "failure" even though you did the right thing by reporting it.

When should you use the Phish Alert button? Use it for emails you believe are phishing — messages trying to trick you into giving up your login, personal info, or money, or to click a suspicious link or attachment. For everyday spam or annoying sales emails that aren't a real threat, just delete them — no need to report those.

Two Phish Alert buttons on your PC ribbon? Some of you may notice two Phish Alert icons in your Outlook desktop ribbon. Both are correct — one is simply a newer version. Either one will report the email properly.

Reporting from your phone? You'll need the Microsoft Outlook mobile app (the Phish Alert option isn't available in other mail apps):

1. Open the email and tap the "..." (More options) in the top right.
2. Tap Phish Alert from the menu that appears.

Thanks for helping keep the company secure — reporting the right way makes a real difference.