Allow hyperlinks in suspected phishing e-mail messages
This per-user registry value controls whether Outlook makes hyperlinks usable in messages identified as suspected phishing but not also classified as junk e-mail.
since 0.9.8.11
Purpose
Show registry keys (1)
HKCU\software\policies\microsoft\office\16.0\outlook\options\mail\junkmailenablelinks
This per-user registry value controls whether Outlook makes hyperlinks usable in messages identified as suspected phishing but not also classified as junk e-mail.
The value uses the REG_DWORD data type. A value of 1 allows hyperlinks in these messages. A value of 0, or an unconfigured value, leaves them disabled. The setting does not enable links in messages that are also classified as junk e-mail; those links remain blocked as part of Outlook's junk e-mail handling.
Notes
Security
Allowing the hyperlinks removes a safeguard from messages that Outlook has identified as possible phishing attempts. Users can then open links leading directly to deceptive or otherwise harmful websites, increasing the risk of credential theft or disclosure of sensitive information.
This setting does not change whether a message is classified as phishing or junk e-mail, and it does not replace server-side protection. It controls only the usability of hyperlinks in the suspected phishing messages described above.
Possible side effects
When hyperlinks are not allowed, they are also unavailable in legitimate messages that Outlook has incorrectly identified as suspected phishing.
Notes
Because the value is stored under HKCU, it applies to the individual user. The 16.0 version path is used by the administrative templates for Outlook 2016 and other supported desktop versions of Outlook.
Microsoft documentation
Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference
Microsoft Download Center: Administrative Template files for Microsoft Office