Gmail is designed to automatically detect and identify phishing emails and will display a warning for emails with potentially harmful attachments and links. However, not all spam or phishing attempts will be detected so it is recommended that the message is reported to Google directly using their built-in reporting tools. This will help improve their filters and prevent similar spam or phishing attempts from reaching people in the future.

Google Support Link: Report Spam to Google

What is phishing?

Phishing is an attempt by a malicious actor acting as a trusted entity to acquire your sensitive information such as usernames, passwords, credit card details, or other private information. The WU Information Technology Office advises faculty, staff, and students to be vigilant when opening emails from unknown or unexpected senders.

Learn more about phishing: https://support.google.com/mail/answer/8253?hl=en#zippy=%2Cuse-gmail-to-help-you-identify-phishing-emails

In some cases, you can check for suspicious senders by clicking on the small arrow next to your name to expand the sender’s information. Never reply to or click on links or attachments if the reply-to or mailed-by addresses originate from outside of the organization and make sure to report the message as phishing.

Reporting spam and phishing

With the message open, click on More, the button on the far right next to Reply, and click Report Phishing.

Remove phishing flag from message

If an email was incorrectly marked as phishing, please follow the steps below:

With the message open, click More, and select Report not phishing from the menu.