How To Report A Suspicious or Phishing Email

When you receive a suspicious or Phishing email, there are multiple ways in Outlook for PC and Outlook For Mobile to do this. This is the officially supported and recommended way to report emails that you believe are suspicious or Phishing. If you do not use this method and report KnowBe4 emails using the built in method instead, you may be flagged as failing a KnowBe4 test email and be subject to additional training. 

Outlook 365 For PC

When using Outlook 365 on your computer, this is the only recommended way to report these types of emails.

1. With the email selected like you would normally do to read the email, at the top there should be an Outlook add-in called The Phish Alarm "Report Suspicious Message". Click that button.

   

2. You may be asked to sign into the application. This will use SSO (your Cochran email address) and this window will appear. 

3. 

   If the reported email is a KnowBe4 email, you will know immediately since it will tell you. If not, the Proofpoint system will try and make a determination of the reported email and it will tell you what that is. If the Proofpoint system cannot make a determination, the IT admin staff will be notified and we will need to make a determination of the email reported. Once that has been completed, you will be notified. 

TIP:

If the Phish Alarm button is not present for you, the toolbar at the top may need to be expanded to show additional features. You can click the down arrowhead located at the top right of the toolbar.

Outlook for IOS or Mobile

There is a similar system for the Outlook for IOS but much simpler. There is a header inserted into all external emails that you can simply select "Report Suspicious." This will open a browser, pull the email and ask you to confirm that you want to "Report Suspicious Message". 

The email will go through the same process as listed above and you will recieve a notification regarding the outcome of the report. This saves time for everyone involved since you do not need to forward the email to the helpdesk and potentially spread a malicious email to others investigating the reported message.