Skip to main content
🦉
Message CenterMicrosoft 365 Updates
HomePermissionsTenant FinderM365 ReportPortfolio
🦉
M365 Message Centerby Cengiz YILMAZ

Track the latest updates, features, and announcements for Microsoft 365 services. Comprehensive archive of service updates and important changes.

Quick Links

HomePermissionsTenant FinderM365 ReportPortfolio

Connect

© 2026 M365 Message Center. Created with ❤ by Cengiz YILMAZ

Data sourced from Microsoft 365 Message Center • Not affiliated with Microsoft

  1. Home
  2. /
  3. MC790242

Microsoft Defender for Office 365: Reported mailbox notifications messages subject change

Informational

Message ID

MC790242
View in Admin Center

Services

Exchange Online
Microsoft Defender XDR

Summary

Microsoft Defender for Office 365 is changing the subject line format for end-user reported notification messages to improve readability and rule creation. The rollout starts mid-June 2024 and ends mid-July 2024. No action is required from users as existing settings remain unaffected.

Details

Updated June 6, 2024: We have updated the rollout timeline below. Thank you for your patience.

Currently, in Microsoft Defender for Office 365, when a notification message is reported by an end user and arrives at the reporting mailbox, the subject lines begin with:

  • "1|" to denote email messages reported as junk.
  • "2|" to denote email messages reported as not junk.
  • "3|" to denote email messages reported as phishing.

Moving forward, the subject lines of notification messages reported by end users will start with

  • "Junk:" to denote email messages reported as junk.
  • "Not junk:" to denote email messages reported as not junk.
  • "Phishing:" to denote email messages reported as phishing.

This change is being made to ensure readability and enable you to create better rules inside your reporting mailbox.

The subject line for the team's end-user reported notification messages will remain the same, continuing to start with "Security risk:"

When will this happen:

General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out mid-June 2024 (previously late May) and expect to complete mid-July 2024 (previously mid-June).

How this will affect your organization:

After the rollout is complete, notification messages reported by end users will be affected. However, notification messages reported by end users prior to the rollout will remain unchanged.

What you need to do to prepare:

No action is required on your part. There won't be any change to your existing user reported settings.

Timeline

Published
May 4, 2024
Message published to Message Center
Updated
Jun 6, 2024
Message content updated
End Date
Aug 31, 2024
Message timeline ends

Tags

#Updated message#Feature update#Admin impact

Category

Stay Informed

Related Messages

Similar updates

MC799276

Microsoft Defender XDR: Simplified DomainKeys Identified Mail (DKIM) setup for enhanced domain protection

Jun 6, 2024
MC765801

Microsoft Defender for Microsoft Office 365: enhanced clarity in submission results

Apr 2, 2024
MC744113

Microsoft Defender for Office 365: New Quarantine release details

Mar 18, 2024
MC841229

Classic Microsoft Outlook for Windows: New reporting buttons integrated with Microsoft Defender for Office 365

Jul 29, 2024
MC711335

Microsoft Defender for Office 365: Quarantine End User Allow and Block list management

Jan 30, 2024