Step 1: Sign into your account via the URL http://outlook.office365.com/
Step 2: From the message list pane, click on the message you want to apply a retention policy.
Step 3: On the reading pane, click on three-dot icon above the message.
Step 4: Click on Security options >> Mark as phishing.