IT Services implemented a Report Phish button in supported versions of Outlook for Windows, Outlook for Mac, Outlook on the web, and Gmail clients to improve email security and response. The purpose of this option is to give you a simple way to report to IT Services any suspected phishing scam emails that our email protection systems failed to block and were consequently delivered to your inbox.

What happens when I use the Report Phish button?

Using the Report Phish button allows you to easily forward suspicious emails to IT Security and include the necessary information needed, like the email headers that are important in determining if the email is malicious. Additionally, the Report Phish option triggers an automated process that re-analyzes the message. If the message is found to be malicious, the email protection system will automatically adjust the email filters to better detect similar email scams in the future.

Where can I find the Report Phish button?

The Report Phish button is an add-in to your Outlook Home ribbon that may appear automatically and cannot be removed.

Tip: If the Report phish button is not visible, look under the More Options icon that is denoted by three ellipses (...), then select Report Phish from the drop-down menu.

In the New version Outlook on the web (OWA), the Report Phish button is found with all add-ins under the Apps icon.

In UChicago Gmail, the Report Phish option is accessible via the Side Panel on the Inbox and Message View.

Why don't I see the Report Phish button?

The Report Phish button is only available in the University-licensed Microsoft 365 Outlook desktop app and Outlook on the web, which are both available through the Microsoft 365 portal and UChicago Gmail as part of UChicago Google Workspace. It is not available for any third-party email clients or personal accounts.

If you have any questions about reporting phish emails or have any other security concern, please contact security@uchicago.edu.