Skip to main content

Reporting a Suspicious Email in Gmail

How to report a suspicious email with the Phish Report Button in Gmail.

Toby Reed
Updated by Toby Reed

This short guide will take you through how to report a suspicious email with the Phish Report Button in Gmail.

If an email looks suspicious, do not click its links, open its attachments, reply to it or forward it. Report it instead.

Reporting an email

  1. Open the email in Gmail on your computer.
  2. In the panel on the right of Gmail, click the Phish Report icon. Your organisation may have given it a different name or colour.
  3. Click Phish Report.
  4. Read the message that appears. The email is moved to Bin.

If the email is still showing after you report it, refresh Gmail. It has already been moved to Bin, and Gmail just has not updated the page yet.

What the message means

You see

What happened

Congratulations on identifying a phishing campaign sent by Boxphish

It was a Boxphish training email. Your report is recorded and the email is moved to Bin.

Great work on reporting a potential phishing email

A copy has gone to your security team and the email is moved to Bin.

Thank you for reporting this email

The report could not be completed. Do not interact with the email, and tell your IT or security team about it in the usual way.

Permissions needed

Click Grant permissions, tick every permission Phish Report asks for, then try again.

Please note that your organisation may have changed the wording of these messages.

If you experience any issues with this, please contact your IT team.

How did we do?

Customising the Gmail Phish Report Button

Contact