How to Report Phishing Emails

Overview

Reporting suspicious messages helps Technology Services respond to email-based attacks facing the campus community. When you report an email, Technology Services staff will investigate the scope and severity of the threat and take specific actions to mitigate potential damage.

Report Using the Phish Alert Button

To report a known phishing email, please use the Phish Alert Button . Reporting a phishing message using the phish alert button forwards a copy of the suspicious message to the Information Security team for further investigation. For more information, see KnowBe4's documentation.

Gmail Web Interface

1. Select the email then click the hook in the right side panel.
2. Click Phish Alert to report the message.
3. You will receive a confirmation message and the email will be deleted from your Inbox once the page is refreshed.
   • Note: If the message you report is simulated phishing, the message displayed will indicate that you correctly identified it.

Gmail Mobile App

1. On an open email, scroll to the button and locate the available add-ons section.
2. Click on the phish hook icon.
   
3. Tap the blue Phish Alert button to report the message.
4. You will receive a confirmation message and the email will be deleted from your Inbox. Tap the back arrow to return to your inbox.
   • Note: If the message you report is simulated phishing, the message displayed will indicate that you correctly identified it.

Report Using Gmail

1. In Google Mail, open the message.
2. Click the three dots next to the reply button then click Report phishing.

If you would like to block the sender, click the three dots next to the reply button then click Block.