GBH How to report
Phishing reporting

Suspicious email? One button: Report Phishing.

It sends the email to GBH IT for review. Look for the blue circle with the padlock.

How to report
GBH's Outlook for Android: the message menu panel with Report Phishing at the bottom left, circled in green
Report Phishing icon
Report PhishingGBH's reporting button

Two buttons look alike. Use the blue one.

Outlook shows Report Phishing right next to Microsoft's Report Message. For suspected phishing, always pick Report Phishing.

Report Phishing icon
Use this

Report Phishing

Blue circle, white person, padlock on the chest. Goes to GBH IT.

or
Report Message icon: envelope with a yellow warning badge
Not for phishing

Report Message

Microsoft's built-in option. Use Report Phishing instead.

Bottom row of GBH's Outlook for Android menu: Report Phishing circled in green

Screenshot from GBH's Outlook for Android. The Report Message icon in the card is redrawn for clarity.

How to report

Don't delete it, forward it or reply. Report it, and you're done.

Reporting matters: GBH IT can check the email and warn colleagues who got the same one.

  1. Select Report Phishing

    Open the email and select Report Phishing. The section below shows where it is in your Outlook.

  2. Confirm

    Confirm that you want to submit the email as suspected phishing.

  3. See the result

    What you see next depends on the email:

    Training simulationYou'll get a congratulations message.
    Looks realIt goes to GBH IT as a suspected phishing email.

Where it lives in each Outlook

Outlook for Android

Open the email and tap the three dots on the right, above the message. A panel slides up. Report Phishing is at the bottom.

Bottom of the Android panel: Report Phishing circled in green

Outlook desktop app (classic)

In the ribbon at the top. It opens a side panel to start your report.

Not in the ribbon? Select All Apps, then Report Phishing.

Outlook on the web and new Outlook

Open the email. It's in the message actions at the top right of the message.

Can't see it? New Outlook can hide it among other add-ins. Select the Apps icon in the message actions, then Report Phishing.
Outlook on the web in Edge: the Report Phishing icon, a blue circle with a person and padlock, in the message actions, marked with a green arrow

Red flags worth a second look

  • Urgency or threats"Act now", "account suspended", "final notice".
  • Sender mismatchThe display name and the real address or domain don't match.
  • Disguised linksHover, or long-press on mobile, to see the real destination first.
  • Unexpected attachmentsEspecially ones that ask you to enable content or sign in.
  • Password or code requestsTreat any email asking for your password or a sign-in code as suspicious.
  • Odd requests from people you knowPayments, gift cards, bank detail changes. Confirm another way.

General security tips. These are not from the usecure guide.

Already clicked a link or entered your password?

No blame, speed matters. Contact IT right away, then report the email.

infosec@gbh.tech