To review and unlock phishing forms, admins will have to go through the following steps: Sign in to the Microsoft 365 admin center at admin.microsoft.com.