GBH

Phishy email? Hit Report Phishing.

One tap sends it to GBH IT. Don't delete it, don't forward it. Report it.

Show me how
The Report Phishing button in GBH's Outlook: blue circle with a white person and padlock, labelled Report Phishing
This is the button. Real screenshot from GBH's Outlook.

This one.

Report Phishing icon

Report Phishing

GBH's reporting button. Blue circle, white person, padlock on the chest. Your report goes to GBH IT.

Not this one.

Report Message icon: envelope with a yellow warning badge

Report Message

Microsoft's built-in option sits right next to it. For suspected phishing, use Report Phishing instead.

GBH's Outlook for Android: Report Phishing circled in green
Screenshot from GBH's Outlook for Android. The Report Message icon above is redrawn for clarity.

Every report is an early warning.

When you report, GBH IT can check the email and warn colleagues who got the same one. Deleting it quietly helps no one. And if it was a training simulation, reporting is exactly the right move.

Three steps. That's it.

  1. Select Report Phishing

    Open the email and select Report Phishing.

  2. Confirm

    Confirm you want to submit it as suspected phishing.

  3. Done

    Training simulation? You'll be congratulated. Otherwise it goes to GBH IT for review.

Find it in your Outlook

Outlook for AndroidPhone

Open the email, tap the three dots on the right above the message. A panel slides up and Report Phishing is at the bottom.

Bottom of the Outlook for Android panel with Report Phishing circled in green

Outlook desktop appClassic Outlook for Windows

It's in the ribbon at the top. Selecting it opens a side panel to start your report.

Not in the ribbon? Select All Apps and pick Report Phishing from the list.

Outlook on the web and new OutlookBrowser and new Outlook for Windows

Open the email. It's in the message actions at the top right of the message.

Can't see it? New Outlook can hide it if you have lots of add-ins. Select the Apps icon in the message actions and pick Report Phishing.
Outlook on the web in Edge: the Report Phishing icon, a blue circle with a person and padlock, in the message actions, marked with a green arrow

Red flags to watch for

  • Rush and pressure"Act now or lose access." Urgency is the oldest trick.
  • Odd senderThe name looks right but the address or domain doesn't.
  • Mystery linksHover, or long-press on mobile, to see where a link really goes.
  • Surprise attachmentsEspecially ones asking you to enable content or sign in.
  • Password or code requestsTreat any email asking for your password or a sign-in code as suspicious.
  • Strange asks from people you knowPayments, gift cards, bank changes. Check with them another way.

General security tips. These are not from the usecure guide.

After you report

Simulation

You'll get a congratulations message. You caught a training email.

Looks real

It goes to GBH IT as a suspected phishing email, so they can check it and protect everyone else.

Already clicked or typed your password?

No blame, speed matters. Contact IT right away, then report the email.

infosec@gbh.tech