Cybersecurity

How to spot and report a phishing email

Phishing emails try to trick you into clicking a link, opening an attachment or sharing information. Learn the warning signs and how to report them.

Self-help article4 min readHelp is one ticket away

Warning signs

  • Urgent or threatening language, such as "your account will be closed today"
  • A sender address that does not match the company it claims to be from
  • Unexpected attachments, invoices or shared documents
  • Links whose real address (shown when you hover) looks wrong
  • Requests for passwords, payment, gift cards or changes to bank details
  • Generic greetings like "Dear user" and unusual spelling or grammar

Check before you click

  1. Hover your mouse over a link without clicking to see the real web address.
  2. Look closely at the sender's full email address, not just the display name.
  3. If a message seems unusual, contact the sender using a phone number you already know, not one in the email.

Report it in Outlook

  1. Select the suspicious email.
  2. Click Report on the toolbar (in some versions, Report Message), then choose Report phishing.
  3. The message is removed from your inbox and sent for analysis.

If you do not see a Report button, forward the email as an attachment to our support team and then delete it.

If you already clicked a link or entered a password, follow our guide "What to do if you clicked a suspicious link" and call us right away.

Still need help?

If these steps did not solve the problem, our team is ready to help.