To report phishing messages, submit them as an attachment to the address: itprotect@umass.edu.  View an example of a phishing email. 

To help us effectively respond to reports of phishing, you must forward the message as an attachment.

 

To forward an email as an attachment from Microsoft Outlook Desktop App:

Right click on the phishing message to show a menu of options.

Select "Forward as Attachment". A new message will open with this phishing message attached.

Address this new message to itprotect@umass.edu and send.

 

To forward an email as an attachment from Microsoft O365 Web App:

Open a new message addressed to itprotect@umass.edu.

Drag the phishing message from your message listing as into the new message, and send.

 

To forward an email as an attachment from Apple Mail:

Right click on the phishing message to show a menu of options.

Select "Forward As Attachment". A new message will open with the phishing message attached.

Address this new message to itprotect@umass.edu and send.

To Report Phishing in Google Apps:

Open the message. Click the disclosure next to the reply button.

Select Show Original, copy all the information that appears and paste into a new message.

Address the new message to itprotect@umass.edu and send.

To forward an email as an attachment from Mozilla Thunderbird:

Open the phishing message.

Select message > Forward As > Attachment from the menu. A new message will open.

Address the new message to itprotect@umass.edu and send.

More Information:

Security Support Articles

What is phishing?

How to Protect Yourself Against Phishing Scams & Identity Theft