I have created a form for a silent auction (for a non-profit) and it is flagged at phishing. It only asks for name/phone/email.

The phishing flagging in Microsoft Forms can occur even if your form only requests basic information like name, phone, and email. This is due to automated machine reviews that proactively detect potential malicious intent or the collection of sensitive data. Forms that ask for personal information can sometimes trigger these automated systems, leading to temporary blocks on collecting responses.

To address this issue, you can:

1. Review the Form Content: Ensure that the wording and structure of your form do not inadvertently suggest phishing or data collection beyond what is necessary.
2. Contact Admins: If you are a global or security administrator, you can log in to the Microsoft 365 admin center to review the blocked form in the Message Center. You can choose to unblock it if you believe it does not have malicious intent.
3. Provide Context: When requesting an unblock, provide specific details about the form, such as its purpose and the information it collects, to help administrators understand its legitimacy.

If the form continues to be flagged, consider simplifying the information requested or modifying the form's language to reduce the likelihood of being flagged as phishing.

References:

• Forms and anti-phishing
• Review and unblock forms or users detected and blocked for potential phishing

Hi TC,

Thanks for posting your concern on Microsoft Q&A.

Regarding the Microsoft Form issue, I understand that your Form has been flagged as error, and you cannot collect needed information from your auction. Please note that: name and phone number can be triggered as sensitive so that is the reason your form cannot be collected.

Hence, beside the above answer, if you need more troubleshoots, you can check these workarounds below:

1. Rename fields: Avoid labels like “Personal Information.” Use neutral terms such as “Contact Details” instead of “Name and Phone.”
2. Remove unnecessary sensitive fields: If any question could be interpreted as requesting sensitive data, rephrase or delete it.
3. Create a copy of the form: Sometimes duplicating the form clears the block.
4. Check question types: The “Text” question type often triggers the block. Use “Choice” or “Dropdown” where possible.

Here is the Microsoft guidance for you: Review and unblock forms or users detected and blocked for potential phishing

In case you need further help, please also check with your admin if they can resolve it for you.

I hope these additional details can be helpful for you.

Thanks, and sincerely,

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.