¶ What are M365 Safe Links and why are they important?
Safe Links is a feature in Microsoft 365 Advanced Threat Protection (ATP) that provides URL scanning and will verify links are safe at the time that you click them. Safe Links scanning can help protect your organization from malicious links that are used in phishing and other attacks.
This feature scans a URL link in applications like Teams, Outlook, Word, Excel, PowerPoint and identifies when a link might be suspicious or malicious in nature such as a phishing website or a website containing malware.
¶ What happens if I get a warning from a safe link?
If a URL is categorized as malicious or suspicious in nature you will be redirected to a block page upon accessing the link. You will want to carefully read this dialog box as it will give you an idea if the link provided might be malicious in nature. In many instances you will want to mark the email as phishing/spam. If you 100% believe the URL is safe and from a trusted sender, you will have the option to proceed by clicking “Continue Anyway (not recommended)"
¶ Additional Assistance
If you experience any issues that you believe are related to ATP Safe Links filter, please contact the SWMITECH Help desk with details of the trouble you are having. Please do not forward malicious emails to the help desk.
Contact the SWMITECH Help Desk | Phone 269-250-9280 | Email | Create a Support Ticket | Report Spam
¶ Video Guide
¶ Warning pages from Safe Links
This section contains examples of the various warning pages that are triggered by Safe Links protection when you click a URL.
¶ Scan in progress notification
The clicked URL is being scanned by Safe Links. You might need to wait a few moments before trying the link again.
Scan in Progress: You will simply need to wait a few moments for the scan to complete
¶ Suspicious message warning
The clicked URL was in an email message that's similar to other suspicious messages. We recommend that you double-check the email message before proceeding to the site.
Suspicious: We recommend that you double-check the email message before proceeding to the site.
¶ Phishing attempt warning
The clicked URL was in an email message that has been identified as a phishing attack. As a result, all URLs in the email message are blocked. We recommend that you do not proceed to the site. You might also consider reporting this email as phishing.
Phishing: We recommend that you do not proceed to the site.
¶ Malicious website warning
The clicked URL points to a site that has been identified as malicious. We recommend that you do not proceed to the site.
Malicious: We recommend that you do not proceed to the site.
¶ Blocked URL warning
The clicked URL has been manually blocked by an admin in your organization. The link was not scanned by Safe Links because it was manually blocked.
There are several reasons why an admin would manually block specific URLs. If you think the site should not be blocked, contact the helpdesk.
Blocked: Contact the helpdesk if you believe this is a safe link
¶ Error warning
Some kind of error has occurred, and the URL can't be opened.
Error: Proceed with caution