Home → Gmail → Phishing → Report Phishing Attempts
5.1. Report Phishing Attempts
To report a suspicious email via Huntress Button:
-
Open the email. Do not click any links, download attachments, or reply.
-
Click Report a Phish on the right-hand side of Gmail.
-
If you don’t see it, click the three dots (…) at the bottom of the add-on list and select Report a Phish.
Note: If the button isn’t showing, close and reopen your browser, then try again. - Confirm by clicking "Report Email" when prompted. The phishing email will be automatically removed from your inbox.
As a reminder from our Huntress training, here are a few common signs of phishing to look out for when you receive an email you weren’t expecting:
-
Sender looks “almost right”: misspellings, extra characters, unusual domain (e.g.,
@goog1e.com), or the display name doesn’t match the email address. -
Urgent or threatening tone: “Act now” “Account will be locked” “Payroll issue” “CFO needs this today” etc.
-
Unexpected link or attachment: login pages, invoices, “secure documents,” ZIP/HTML files, or anything you weren’t expecting.
-
Requests for sensitive info: passwords, MFA codes, gift cards, banking info, or wire transfers.
To report a suspicious email via email forwarding:
-
Forward the email to: phishing@bwscampus.com
-
Add a quick note if relevant (“I clicked a link” or “I entered my password”)
-
Mark it as phishing in Gmail:
-
Select/open the original email → click the three dots in the top right ⋮ → Report phishing
Do not reply to the sender or click links/attachments.
If you clicked a link or entered credentials, contact IT immediately.