What is Phishing?
Phishing (pronounced: fishing) is an attack that attempts to steal your money, or your identity, by getting you to reveal personal information -- such as credit card numbers, bank information, or passwords -- on websites that pretend to be legitimate. Cybercriminals typically pretend to be reputable companies, friends, or acquaintances in a fake message, which contains a link to a phishing website.
When should I report emails?
Please use the phish alert button to report any email that
you think is suspicious.
- If you
report a simulated phishing email, also known as a phishing training
email, well done, it will be logged in your training record.
- If the
email you report is not a training email, one that could be a real threat,
a helpdesk a ticket will be created, alerting the whole IT team to
investigate.

Please do not forward suspicious emails to helpdesk or to IT staff
- if it is a simulated phishing, it may result in the email being counted as
"clicked" and the system will think you have failed the test and give
you more training!

Please only report emails that you think are malicious or
suspicious (phishing) and not email that is simply unwanted (spam)
which you can just delete.
How should I report emails?
Click the phish alert button. The phish alert button is an envelope and fishing hook
icon.
New Outlook / Outlook on the Web
In "new outlook" is at the top of the email
Classic Outlook
In "classic outlook" it is in the ribbon
Depending on your outlook layout, you may need to click the three
dots at the end of the ribbon for "more commands" to find it. 
Outlook mobile app
It is also available within the outlook app on Android and iOS. With and email open, tap the three dots to the right of the contact name/email address. A menu will pop up at the bottom of the screen. Scroll this menu to the bottom find "Phish alert" at the bottom.