Reporting Phishing and Suspicious Emails

Identifying Phishing

Phishing is a deceptive practice used by hackers to steal sensitive information like passwords and financial data. Look for red flags such as urgent or threatening language, generic greetings like 'Dear Customer', and sender addresses that do not match the official company domain. Often, attackers will spoof a high-level executive's name but use a random Gmail or Outlook address. Hover your mouse over any links to see the actual destination URL before clicking; if the link looks like a string of random characters or points to an unfamiliar domain, it is likely malicious. Be especially wary of attachments you weren't expecting, even from people you know.

Using the Report Button

We have integrated a 'Report Phishing' button directly into your email client's toolbar. If you encounter a suspicious message, click this button immediately. This action performs three critical tasks: it moves the email to a secure folder for our security analysts to review, it notifies our email gateway to block that sender for everyone in the company, and it helps our AI-based filters learn to recognize similar attacks in the future. Reporting a suspicious email is the single most helpful thing you can do to protect your colleagues from being the next victim. Do not simply delete the email; reporting it is what stops the attack from spreading.