Outlook Suspicious Email Triage Checklist for Staff
Teach a safe routine for emails that might be phishing (defensive).
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Create a short checklist and training script for staff to handle emails that might be phishing in Outlook, as defensive awareness training; do not write phishing emails or ways of avoiding filters. Our reporting method and contacts: [REPORTING_METHOD]. Common scams our staff see: [COMMON_SCAMS]. Audience: [AUDIENCE]. On one page write: the warning signs (unexpected requests for money or sign-in, urgent tone, mismatched sender address, link text that differs from the real address, unexpected attachments, requests to change bank details); what to do (do not click or open, check the address by hovering, verify by another channel, report using our method); and what to do if they already clicked or entered details (tell IT at once, change the password via the official site, do not wait). Include five invented example subject lines and the sign that gives each away, and a short quiz of five invented examples to classify as safe, suspicious or unsure with the reason for each answer. Reporting a harmless email is welcome; reporting late is the real problem. Add a one-paragraph message from management encouraging reporting without fear of blame. Mark steps that depend on our tools [VERIFY].
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.