How does Defender for Office work?
Notes: It's always important to use common sense when receiving an email. Always pay attention to the sender, links and attachments in the emails you receive.
Spam filter
With Defender for Office 365, your spam emails no longer end up in “Junk mail”. Instead, you will receive a spam report from Microsoft. To the right is an example of the spam report.
The spam report shows the emails that have been caught by the spam filter. You have the following options:
- Browse message: Allows you to view the email before choosing how you want to handle them.
- Release: We recommend that you ALWAYS review the message before releasing it. When you release the email, it will land in your inbox in the normal way.
- Block sender: Blocks the sender so that you will not receive emails from the same sender in the future.

Attachment
An email with an attachment will be delivered without the attachment initially. Once the attachment has been scanned for threats, the attachment will become visible in the email. This way you will be able to see the email immediately, but only open the attachment when it is safe to open.


Links
When you receive an email that contains a link/URL to a website, Microsoft analyzes the link before you get access.
If the link is not secure, you will be greeted with the message shown to the right.
This reduces the risk of entering a malicious site, such as a phishing site that wants you to enter your code.
