WHEN TO REPORT Report emails that ask for passwords, MFA codes, gift cards, payment changes, confidential files, urgent approvals, or anything that feels unusual. BEST METHOD Use your email application's report phishing or report junk feature when available. If no reporting button exists, open a support ticket or forward the email using your organization's approved process. WHAT TO INCLUDE Include the original message if possible, not just a screenshot. Add whether you clicked anything, opened attachments, replied, or entered information. WHAT NOT TO DO Do not forward suspicious messages broadly to coworkers. That can spread harmful links. AFTER REPORTING Delete obvious spam if instructed by your system, or leave the message untouched if support needs to investigate.