How to report a phishing email

1. In your mail app

Reporting as phishing is stronger than marking as spam. It tells the provider the email is dangerous, not just unwanted.

Mail service	Where to click
Gmail	Open the email, click More (the three dots next to Reply), then Report phishing.
Outlook.com	Select the email, click Report above the message, then Report phishing. In the Outlook phone app: three dots, Report Junk, then Phishing.
Yahoo Mail	Select the email and click Spam. This also reports it to Yahoo.
iCloud Mail	Mark the email as Junk. If it pretends to be from Apple, forward it to reportphishing@apple.com.

2. To the company being imitated

Companies use these reports to get fake websites taken down. Forward the email itself rather than copying its text.

Company	Where to report
PayPal	Forward the email to phishing@paypal.com, then delete it.
Geek Squad	Forward the email to abuse@bestbuy.com.
USPS	Forward the email to spam@uspis.gov, then delete it. Forward scam texts to 7726.
Coinbase	Forward the email to security@coinbase.com.
Venmo	Forward the email to phishing@venmo.com.
UPS	Forward the email to fraud@ups.com.
DocuSign	Forward the email as an attachment to verify@docusign.com.
Netflix	Forward the email to phishing@netflix.com.
DHL	Send the email as an attachment to phishing@dhl.com.
Amazon	Report it at amazon.com/reportascam. Without an Amazon account, email reportascam@amazon.com.
IRS	Forward the email to phishing@irs.gov.

3. To the authorities (United States)

• FTC: report at reportfraud.ftc.gov.
• Anti-Phishing Working Group: forward the email to reportphishing@apwg.org.
• Scam texts: forward them to 7726 (SPAM).
• If you lost money: also file a report with the FBI at ic3.gov.

Then delete it

Once reported, delete the email. Do not reply and do not click “unsubscribe” in it.

If you already clicked or replied

Reporting is not enough in that case. Work through the steps for what you entered first.