How to report a phishing email

1. In your mail app

Reporting as phishing is stronger than marking as spam. It tells the provider the email is dangerous, not just unwanted.

Mail service	Where to click
Gmail	Open the email, click More (the three dots next to Reply), then Report phishing.
Outlook.com	Select the email, click Report above the message, then Report phishing. In the Outlook phone app: three dots, Report Junk, then Phishing.
Yahoo Mail	Select the email and click Spam. This also reports it to Yahoo.
iCloud Mail	Mark the email as Junk. If it pretends to be from Apple, forward it to [email protected].

2. To the company being imitated

Companies use these reports to get fake websites taken down. Forward the email itself rather than copying its text.

Company	Where to report
PayPal	Forward the email to [email protected], then delete it.
Geek Squad	Forward the email to [email protected].
USPS	Forward the email to [email protected], then delete it. Forward scam texts to 7726.
Coinbase	Forward the email to [email protected].
Venmo	Forward the email to [email protected].
UPS	Forward the email to [email protected].
DocuSign	Forward the email as an attachment to [email protected].
Netflix	Forward the email to [email protected].
DHL	Send the email as an attachment to [email protected].
Amazon	Report it at amazon.com/reportascam. Without an Amazon account, email [email protected].
IRS	Forward the email to [email protected].

3. To the authorities (United States)

• FTC: report at reportfraud.ftc.gov.
• Anti-Phishing Working Group: forward the email to [email protected].
• Scam texts: forward them to 7726 (SPAM).
• If you lost money: also file a report with the FBI at ic3.gov.

Then delete it

Once reported, delete the email. Do not reply and do not click “unsubscribe” in it.

If you already clicked or replied

Reporting is not enough in that case. Work through the steps for what you entered first.