Why this matters
Reporting phishing helps your email provider block similar messages, lets your IT team protect colleagues, and gives Australian authorities the information they need to track scams. It takes a minute and is far better than simply deleting the email.
What you'll need
- The suspicious email (do not delete it yet)
Step-by-step instructions
Step 1
Do not click, reply or open attachments
Leave the email as it is. Replying confirms your address is active.
Step 2
Use the Report button in Outlook
In Outlook or Outlook on the web, select the message and choose "Report" then "Report phishing" from the toolbar. In Gmail, open the message, select the three dots and choose "Report phishing".
Step 3
Tell your IT team at work
If the email arrived in a work mailbox, let your IT provider know, especially if colleagues may have received it too. They can remove it from every mailbox.
Step 4
Report to Australian authorities
Report scams to Scamwatch (scamwatch.gov.au). If you lost money or data, or a business was affected, report it through ReportCyber at cyber.gov.au.
Step 5
Report impersonated brands
Many organisations have a dedicated scam reporting address listed on their official website, for example banks, Australia Post and the ATO.
Step 6
Delete the email
Once reported, delete the message and empty your Deleted Items folder.
Summary
A quick report protects you, your colleagues and other Australians from the same scam.
Still Need Help?
Some IT problems are easier to solve with a professional. If you've followed the guide and still need help, the Omnicron team can assist.