Restore Emails Falsely Reported as Phishing to the Inbox

Check Point Email Security now automatically returns legitimate emails to users’ inboxes after phishing reports are determined to be false.

When Microsoft users report an email as phishing using the native Microsoft Report button or other reporting tools, Microsoft immediately moves the email to the Deleted Items folder before it is analyzed. If the report is later determined to be a false alarm, users must manually locate the email before they can continue working with it. This creates unnecessary friction and interrupts productivity.

With this new enhancement, Check Point Email Security streamlines that experience. Whenever an administrator declines a phishing report or Check Point automatically determines that a reported email is legitimate, the user is notified that the email is safe. In addition, the email is automatically restored from the Deleted Items folder back to the user’s inbox, making it immediately accessible again.

This improvement eliminates the need for users to search through deleted emails after an incorrect phishing report, reducing confusion and helping them quickly resume working with legitimate messages. At the same time, organizations continue to benefit from the existing phishing reporting workflow and validation process, ensuring users receive clear feedback while maintaining an efficient and user-friendly experience.

This update is being gradually deployed and will become available in customer portals over the next 7 days.