Set Up Custom Messages To Users When Reporting

One of the most effective ways to detect phishing threats early is to have users report suspicious emails.

It helps your IT team spot potential phishing attempts faster, reduce risk and protect your organization. 

A simple way to increase reporting is to show users a custom confirmation message when they submit a report. It makes the experience feel more personal and encourage people to keep reporting. 

This message  doesn’t need to be long - just a quick thank you and a reminder that their action makes a difference.

Below you’ll find instructions for setting up a custom message, with an example you can use or tweak.

How to set up custom messages in Defender

1. Go to Submissions (in your Microsoft Defender)
2. Go to User Reported settings
   
   
   
   
   
3. Customize the message the user will get when they report an email as phishing by going to Customize messages
   
   
   
   
   
4. Click Add Customized message
   
   
   
   
   
5. Choose the language that the user will receive the message in
   
   
   
   
6. Add the message to be shown before an email is reported as phishing
   
   
   
   
   

   Here's an example of what you could insert:
   
   Title:
   Thank you for helping keep us secure!

   Description:
   By reporting suspicious messages, you help strengthen our security. IMPORTANT: If you have interacted with the email in any way (downloaded something, clicked a link, or submitted some data, it is important that you also xxx. (insert desired action)
   
   Thank you for staying alert!
   
   
   

7. Add the message to be shown after an email is reported as phishing
   
   
   
   
   

   Here's an example of what you could insert:
   
   Title:
   You made a difference

   Description:
   The message has been reported and will be reviewed. Every report strengthens our defenses and helps protect your colleagues. Thank you for taking action.