KB-S003·Email Security
Recognise and report a phishing email
Phishing is the number-one way attackers get into business accounts. Learn the warning signs and how to report suspicious messages in under a minute.
Published August 2, 2026
Warning signs
| Signal | What to look for |
|---|---|
| Sender address | Domain does not match the company it claims to be (e.g. support@microsofft.com) |
| Urgency | "Your account will be suspended in 24 hours" |
| Unexpected attachment | Invoice, shipping notice, or document you did not request |
| Suspicious link | Hover over it — the URL shown at the bottom of your browser does not match the link text |
| Request for credentials | Legitimate services never ask for your password by email |
What to do
If you have not clicked anything:
- Select the message in Outlook.
- Select Report → Report phishing (or use the Microsoft Report Message add-in).
- Delete the message.
If you clicked a link or entered credentials:
- Do not close the browser — take a screenshot of the page URL.
- Call the help desk immediately: (972) 961-7711 Option 2.
- Change your Microsoft 365 password from a different device (see KB-S001).
- IT will review your account for unusual sign-in activity.
Never
- Forward phishing emails to colleagues "so they can see it" — this spreads risk.
- Open attachments to check whether they are real.
- Enter credentials on any page reached through an unsolicited link.