Body
Overview
Microsoft Defender Safe Links helps protect users from malicious websites by checking links contained in email messages and other supported Microsoft 365 services.
When Safe Links is enabled, links in email messages may be rewritten and appear much longer than normal. This is expected behavior and helps Microsoft Defender evaluate the destination before allowing access.
Safe Links protection is designed to help users avoid phishing websites, malware downloads, credential theft sites, and other potentially harmful online content.
Why Do Links Look Different?
A normal link might look like:
https://www.example.com
A Safe Links protected URL may look similar to:
https://nam01.safelinks.protection.outlook.com/...
This does not necessarily indicate that the message is malicious. It means Microsoft Defender has applied Safe Links protection to the original URL.
How Safe Links Works
Safe Links helps protect users in two ways:
Email Protection
Links in email messages are scanned and analyzed before delivery.
Time-of-Click Protection
When a user selects a protected link, Microsoft Defender may perform an additional security check before allowing access to the destination website.
This provides protection even if a website becomes malicious after the email was delivered.
Important Notes
A Safe Links URL Does Not Mean a Site Is Trusted
Although Microsoft Defender evaluates links, users should still exercise caution.
Be especially careful with messages that:
- Create a sense of urgency
- Request passwords or verification codes
- Ask you to approve unexpected MFA prompts
- Request financial information
- Ask you to download unknown files
- Come from unexpected senders
Unexpected Warnings
If Microsoft Defender blocks or warns about a website, do not attempt to bypass the warning.
If you believe a legitimate site has been incorrectly blocked, contact the IT Help Desk for assistance.
Do Not Use Third-Party URL Decoders
Avoid copying Safe Links URLs into third-party decoding websites.
The safest approach is to review the message carefully and report suspicious messages using the Outlook Report button.
Reporting Suspicious Messages
If you believe an email may be phishing, spam, or malicious:
- Select the email.
- Choose Report in Outlook.
- Select the appropriate reporting option.
- Follow any instructions provided by the security system.
Reporting suspicious emails helps improve protection for all users.
Frequently Asked Questions
Why is the link so long?
Microsoft Defender rewrites links as part of Safe Links protection.
Is every Safe Links message safe?
No. Safe Links provides additional protection but users should still evaluate messages carefully.
Can I remove the Safe Links protection from a message?
No. Safe Links protection is applied automatically by Microsoft Defender according to College security policies.
What should I do if a Safe Links page displays a warning?
Do not continue to the site. Report the message if unexpected and contact the IT Help Desk if you believe the site is legitimate.
Additional Details
Need additional information or assistance? Call the IT Help Desk at 979-830-4357 (HELP) or contact the IT Help Desk Chat Line.