Outlook for Android
Open the email and tap the three dots on the right, above the message. A panel slides up. Report Phishing is at the bottom.
Suspicious email? Use Report Phishing.
One button sends it straight to GBH IT. It's in Outlook on your computer, in the browser and on your phone.
See how to report
Report Phishing
Blue circle, white person, padlock on the chest.
Pick the right button
Outlook shows two report options next to each other. For anything that looks like phishing, use GBH's Report Phishing button.
Use this
Report Phishing
GBH's reporting button. Your report goes to GBH IT.
Not this one
Report Message
Microsoft's built-in option. For suspected phishing, use Report Phishing instead.
Screenshot from GBH's Outlook for Android. The Report Message icon in the card above is redrawn for clarity.
Report it in three steps
Don't delete it, forward it or reply. Just report it. You'll find where the button lives in your version of Outlook below.
Select Report Phishing
Open the email and select
Report Phishing.Confirm
Confirm that you want to submit the email as suspected phishing.
That's it
If it was a training simulation, you'll see a congratulations message. Otherwise it goes to GBH IT for review.
Where to find the button
Outlook desktop app (classic)
Look for Report Phishing in the ribbon at the top. Selecting it opens a side panel to start your report.
Not in the ribbon? Select All Apps, then pick Report Phishing from the list.
Outlook on the web and new Outlook for Windows
Open the email. The button sits in the message actions at the top right of the message.
Not there? New Outlook can hide it when you have many add-ins. Select the Apps icon in the message actions and pick Report Phishing from the list.
Signs an email might be phishing
If something feels off, trust that. You don't need to be sure before you report.
- Pressure to act fast"Your account will be closed today", "Pay this invoice now".
- Sender doesn't add upDisplay name says one thing, the address says another, or the domain is slightly misspelled.
- Links that hide where they goHover (or long-press on mobile) to check the real address before you open anything.
- Attachments you weren't expectingEspecially ones asking you to enable content or sign in to view.
- Requests for passwords or codesTreat any email asking for your password or a sign-in code as suspicious.
- Unusual requests from someone you knowUrgent payments, gift cards or bank detail changes. Check with them another way.
General security tips. These are not from the usecure guide.