In Outlook for Web, the Phish Alert Button will appear in the drop-down menu on an open email, as shown below.

Note:

You can report any email as a phishing email. The reported email will be in your Sent Items as a forwarded message and will be deleted from your inbox.  If you incorrectly reported the email, you can retrieve it from their Deleted items/Trash.