How do I Recognize and Report Phishing Emails?

Location:  Technology Support\FAQs

Last Update:  20240610

Content:  

Phishing emails are created to trick you into clicking on a link or opening an attachment. DO NOT respond or click any links in the email. Report the email using the instructions below.  

How to spot a phishing email?

• Is the message sent to hundreds of people?
• Does the email have misspellings or unusual language?
• Is a student offering work to other students on campus?
• Does the email request you to fill in information on a google sheet?

If you answer “yes” to any of these questions, it’s probably not a legitimate email. 

As a precaution it is recommended to perform a password reset. 

How to report phishing emails

Reporting phishing emails is absolutely the right thing to do. However, forwarding the message often leaves off important metadata that helps determine the legitimacy of the email.

Instead, please submit these suspected phishing emails via the Phish Alert reporting tool, available in both Outlook on the desktop, as well as Outlook on the web. This is not available on the mobile Outlook app for phones or tablets.

Desktop version of Outlook

To report a suspected Phishing Email on the desktop version of outlook, click on the Phish Alert button in the upper right of the Outlook or message window:

(Image of Phish Alert Report)

Once clicked, a new section will open with message info and a Report Email Now button:

(Image of Report Email Now button)

Once you click Report Email Now, it will process the message and the following will happen:

1. The message will get sent to IT to check.
2. The message will be moved to your deleted items folder.
3. You’ll receive the following message.

(Image of phishing report email message) 

Once IT has an opportunity to review the message, you may receive an email back if any further action needs to take place.  When no action is needed, you will not receive any follow-up communication regarding the submission.

Outlook on the Web

To report a suspected Phishing Email on the web version of Outlook, start by clicking the three-dot menu to the upper right of the message in question:

(Image of three dots)

Once clicked, a menu opens – click on the Phish Alert V2 option:

(Image of Phish Alert V2) 

After selecting Phish Alert V2, a new section will open with message info and a Report Email Now button:

(Image of Report Email Now button)

Once you click Report Email Now, it will process the message and the following will happen:

1. The message will get sent to IT to check.
2. The message will be moved to your deleted items folder.
3. You’ll receive the following message

(Image of OK button) 

Once IT has an opportunity to review the message, you may receive an email back if any further action needs to take place. When no action is needed, you will not receive any follow-up communication regarding the submission.