NOTE: Beginning May 1, 2017, please use these new instructions to report phishing and spam messages. You no longer need to send the spam or phishing messages to the ITS Help Desk - please use instructions below.
Phishing scams are an attempt to steal information, such as usernames, passwords, or other personal information, by sending official-looking emails from University administration, the IRS, or other professional entities. A good rule of thumb is that any email that asks for personal information is likely fraudulent.
Spam emails are more often than not attempting to sell products or drive traffic to a website. Spam emails are considered more of an annoyance than malicious, though websites linked in spam emails could contain malware or viruses. You can delete the messages, create a rule to mark as spam, or report directly to Microsoft (see below).
See How to Recognize and Avoid a Phishing Scam for more details.
How to report a phishing scam to UI Phishing Team
For more detailed information on attaching the email with various email clients see How do I forward an email with full headers?
- Create a new email message
- Address it to firstname.lastname@example.org
- From your inbox, select the phishing email that you received - you must select the email, not the content. NOTE: you may need to make your new message window smaller so you can see your Inbox and the new message at the same time.
- Drag and drop the selected item(s) into the new email.
- This will now show as an empty email with the phishing email as an attachment.
- Send the email to the email@example.com address.
How to report Spam to Microsoft
- Select the message that is junk and move it to the Junk Email folder. Moving a message to the Junk Email folder will automatically be reported to Microsoft.
See Microsoft's instructions for more details on reporting spam