← All guides Safety guide
Got something suspicious on your work email? Report it
What to do when something looks suspicious on your work email
If you receive an email or a message at work that looks suspicious, the most valuable thing you can do is simple: don’t interact with it and tell someone.
And don’t worry about “bothering” anyone. Better to report a false alarm than to let a real one slip through — no serious workplace will scold you for paying attention. Quite the opposite.
Simple steps
- Don't click on links and don't open attachments.
- Don't reply and don't forward the message to colleagues.
- Report it through your company's process — if you have a “Report phishing” button in your email, use it; if not, tell the IT or security team.
- If you have already clicked or typed in your password, tell the IT team immediately — the sooner, the better.
Sources
Last reviewed: . Spotted something outdated? Tell us.