Your reports help authorities track down cybercriminals and protect others
Contact IT/Security Team Immediately
Your company's incident response team needs to know right away
Preserve All Evidence
Don't delete the email - IT needs to analyze it
Follow Company Incident Response Procedures
Your organization likely has specific reporting protocols
Report to External Authorities
IT team will coordinate with FBI/law enforcement if needed
This preserves all headers for investigation
Help investigators by providing context
Each organization plays a different role
Never engage with attackers
Primary federal agency for internet crime including BEC, ransomware, and wire fraud
When to report: Any phishing involving financial loss, BEC/CEO fraud, ransomware, or wire transfer requests
Consumer protection agency - tracks fraud trends and patterns
When to report: Identity theft, consumer fraud, deceptive business practices
Investigates financial crimes and cyber-enabled fraud
When to report: Large-scale financial fraud, counterfeit currency phishing, payment card fraud
Global industry association that shares phishing intelligence
When to report: All phishing emails - helps track global phishing campaigns
National cybersecurity coordination center
When to report: Critical infrastructure targeting, large-scale attacks, advanced persistent threats
Forward phishing emails pretending to be from Microsoft/Office 365
Check your bank's website for their specific phishing/fraud reporting address
Report phishing to your email provider (Gmail, Outlook, Yahoo, etc.) using their built-in 'Report Phishing' button
When to report: All phishing emails - helps improve spam filters
Look up the sender's domain ownership and report abuse to their hosting provider
When to report: Helps get phishing sites taken down faster