How to Report a Phishing Attempt

If you think you may have received a phishing email, and you’re not sure what to do, we have the answers for you. Guidelines for reporting phishing emails can be found below.

The Recommended Option: Use the Phish Alert Button (PAB)

Using the Phish Alert Button, which is available now in the Gmail web client, is the easiest way to report phishing. If the email is an instance of phishing, it will package up the suspected email, send it to the Office of Technology Services (OTS) for analysis, and remove it automatically from your inbox. Easy!

The Steps

Gmail

A. Web Client

1. Open Gmail in your web browser.
2. Open the email you want to report (but please don’t click on any links in the email or open any attachments!).
3. Click the Phish Alert Button and you’re done!

B. Android/IOS Client

1. Open the Gmail app.
2. Open the email you want to report (but please don’t click on any links in the email or open any attachments!).
3. Click the Phish Alert Button under the add-ons section and you’re done!

Alternative Option: Forward the Phishing Email as an Attachment

If you do not have a Phish Alert Button, you can report an instance of suspected phishing by forwarding the email as an attachment to OTS for analysis at reportphishing@iit.edu. Once you have forwarded the email, please remember to delete it from your inbox.

The Steps - Web Client

A. Gmail

1. Open Gmail in your web browser.
2. Check the box next to the message that you want to attach.
3. At the top, click the "More" button, i.e., three dots in a row, then select Forward as Attachment.
4. Enter reportphishing@iit.edu in the recipient field for the email to be sent to OTS for analysis.
5. Click Send and you’re done!

B. Outlook (Windows/Mac)

• “Classic Ribbon” View

  1. Select the message you wish to forward to reportphishing@iit.edu from your list of messages.
  2. While in the Home tab, in the Respond section of the ribbon, click the icon encircled in yellow (see below) and then click Forward as Attachment, and the suspicious email will be packaged as an attachment in a new email.
     
  3. Enter reportphishing@iit.edu in the "To" field of that new email so the attachment can be sent to OTS for analysis.
  4. Click Send and you’re done!

• “Simplified Ribbon” View

  1. In the list of your messages, select the message you wish to forward to reportphishing@iit.edu.
  2. Click on the three horizontal dots on the far right-hand side of the ribbon. In the drop-down box that appears, under “Respond,” click Forward as Attachment, and the suspicious email will be packaged as an attachment in a new email.
     
  3. Enter reportphishing@iit.edu in the “To” field of that new email so the attachment can be sent to OTS for analysis.
  4. Click Send and you’re done!