Phish Alert Button

Employees have quick access to a Phish Alert Button, or PAB, within Outlook. Please use the Phish Alert Button in Outlook to report any email that you suspect to be phishing.

The Phish Alert Button will remove the suspected email from your inbox and allow it to be examined by North Park's IT department. You will get a response for each email reported. If determined to be legitimate, the message will be released back to you. If the IT security team determines that the message is malicious, then they will evaluate the extent of the attack and take appropriate action.

If the email you report turns out to be a simulated phishing attack as part of our Security Awareness Training, you will immediately seen a pop-up message congratulating you for reporting it.

By using the Phish Alert Button you protect yourself and others at North Park. The Phish Alert Button is not for spam or other unwanted emails.


Windows Outlook Instructions

In this view, to report an email as a phishing email:

  1. Click the Phish Alert button while the email is open.
  2. A prompt will ask you if you want to report the email as a phishing email. Click Yes to report the email, or click No to not report the email.


The PAB add-in will appear as a clickable Phish Alert tab in any opened email.


Instructions from KnowBe4: https://support.knowbe4.com/hc/en-us/articles/219122288-How-Do-I-Use-the-Phish-Alert-Button-in-Outlook-

Web and Mobile Instructions

North Park recommends using the Official Microsoft Outlook mobile applications. The PAB is not available in other mail applications.

Please see the Mobile Applications section of this O365 Office Installation page.

Office O365

  1. For Employees, the PAB icon will appear in the drop-down menu of an open email.
    Office 365 PAB
  2. To report an email as a phishing email

    1. Click the PAB icon
    2. A sidebar prompt will ask you if you are sure you want to report the email as a phishing email. Click the Phish Alert button to report the email.

Outlook Mobile App (Android)

To report an email as a phishing email:

  1. On any open email, tap the three dots at the top-right of the screen.
  2. The Phish Alert add-in will appear. Tap the Phish Alert add-in.
  3. A prompt will ask you if you are sure you want to report the email as a phishing email. Tap the Mobile Phish Alert button to report the email.
  4. If you have successfully reported a simulated phishing email sent on behalf of your organization, a congratulatory message will display. Click OK to close it.

Outlook mobile app (iOS)

To report an email as a phishing email:

  1. On any open email, tap the three dots at the top-right of the screen.
  2. The Phish Alert add-in will appear. Tap the Phish Alert add-in.
  3. A prompt will ask you if you are sure you want to report the email as a phishing email. Tap the Phish Alert button to report the email.
  4. If you have successfully reported a simulated phishing email sent on behalf of your organization, a congratulatory message will display. Click OK to close it.

Instructions from KnowBe4: https://support.knowbe4.com/hc/en-us/articles/360009629234-How-Do-I-Use-the-Phish-Alert-Button-for-Office-365-

Phish Alert Button FAQ

KnowBe4: https://support.knowbe4.com/hc/en-us/sections/115001173808-Phish-Alert-Button-PAB-

Student Reporting - Shared Mailbox Reporting

Students can report Phishing emails by forwarding the suspicious email to:
phish@northpark.edu

If you need to report a phishing email that came into an Office 365 Shared Mailbox, you will also need to use the forwarding method.

Ideally, in desktop Outlook, use Control-Alt-F (or another method) to forward the email "as an attachment."