Phishing is a malicious attack that is meant to look like it’s sent from a familiar source but it’s an attempt to collect personal information. By default, Microsoft 365 includes some anti-phishing protection. But you can increase that protection by refining the settings.  For more tips like this, check out the working remotely playlist at www.youtube.com/FoetronAcademy . Also, if you need any further assistance then you can raise a support ticket and get it addressed.