1️⃣ Phishing Reporter compatibility
👉 Shared mailbox
Outlook Phishing Reporter supports shared mailboxes since manifest
3.0.0.2(26/09/2024). If the user is on a previous version, they need to update the manifest.The mobile add-in doesn’t support shared mailboxes due to a Microsoft limitation.
👉 Compatible: full experience
Microsoft 365 Business licences (Business Basic, Business Standard, Business Premium), signed into Office with the organisational ID.
Office 365 Enterprise licences (E1/E3/E5/F3), signed into Office with the organisational ID.
Microsoft 365 Enterprise licences (E3/E5/F3), signed into Office with the organisational ID.
Outlook on the web, in a recent browser.
New Outlook for Windows.
Outlook for Mac (current version).
Office 2021 and Office 2024 perpetual licences, provided the Microsoft Edge WebView2 runtime is installed on the device. [TO CHECK: expected to work, not yet confirmed with customers]
👉 Compatible: two-click reporting
Outlook 2019, all editions (volume licence, LTSC or retail).
The Riot button works, but the employee sends the report themselves. See section 2️⃣ for how it works.
👉 Not compatible
Office 2016 Professional Plus and Office Standard 2016 (MSI, perpetual licence): no button is available.
Office 2013 (MSI).
2️⃣ Outlook desktop version
On Windows, compatibility is not decided by the Office edition name but by the engine that displays add-ins. The Riot button needs the Microsoft Edge WebView2 runtime, which Office only uses from build 16.0.13530.20424 onwards.
Microsoft 365 (subscription): works.
Office 2021 and 2024 (perpetual licence): works if the WebView2 runtime is installed on the device. Many corporate system images do not include it.
Office 2019: two-click reporting (see below).
Office 2016 and 2013 (MSI): no button. To get it, move to Microsoft 365 or Office 2021/2024, or have your employees use the new Outlook for Windows or Outlook on the web.
⚠️ Important: do not rely on Microsoft’s table of minimum versions for Office add-ins. It shows when the add-in platform becomes available, not whether the Riot button works: devices above those thresholds can still be incompatible.
👉 Two-click reporting (Outlook 2019)
The employee clicks the Riot button and adds a comment if they wish.
Outlook opens an email addressed to Riot, ready to send, with the suspicious email attached.
The employee clicks Send. Riot creates the report and the employee receives the verdict by email.
Compared with the full experience:
it takes two clicks instead of one;
the verdict is not shown in the Riot pane: it arrives by email, if follow-up notifications are enabled in your workspace;
the reported email is not deleted automatically;
the employee must exist in your Riot workspace.
👍 Good to know: there is nothing to do on the admin side. Installation is the same as usual: devices running Outlook 2019 switch to two-click reporting on their own.
3️⃣ Outlook Mobile
Available on iOS
Available on Android (version 4.2404.1.0 or later)
4️⃣ Updating Phishing Reporter as an admin
Click on the Phishing reporter line, a side-pane will open
Click on “Update Add-in” in the “Action” section
Tick the box: ‘Provide link to manifest file’
Paste this url: https://outlookaddin.tryriot.com/manifest.xml
Follow the steps of the side-pane
The new manifest will take some time to be propagated. users will see the new add-in after 24h or more hours
8. Go to Microsoft Entra admin center and search for “Phishing reporter”, click on it
9. Go to “Autorisations” and “Grant administrator consent for Riot Inc”
5️⃣ Troubleshooting
👉 Is it possible to not grant Write scopes on Microsoft?
Yes, the phishing button doesn’t require Write scopes if you don’t want the button to directly move reported emails to the Trash. To remove these scopes, use https://outlookaddin.tryriot.com/manifest-without-auto-delete.xml instead of https://outlookaddin.tryriot.com/manifest.xml.
👉 Phishing Reporter doesn’t display after installation
It can take up to 48h hours for the add-in to display correctly on user Outlook interface. As explained below, it can also require closing the client and authentificating again.
👉 Authentification sometimes needed for old Outlook version
However, we have two different behaviors.
For people using the heavy version of Outlook, a Web connection to Outlook is sometime required for the button to appear
For people who are on the new version of Outlook, the button appears directly without authentification
👉 Re-authentication sometimes needed
After the installation of the Outlook reporter, the employee needs to logout/login to have the Add-in working.
The best way is to logout, close the browser, and open outlook again.