Skip to Main Content

Instructions for Reporting a Phishing Scam

white desk at a white wall


The UCLA Information Security Office requests that campus users report phishing messages to our team so that we can proactively alert campus users and bring awareness to widespread phishing campaigns. In order for the Information Security Office to take action in response to a reported phishing message, please refer to the following instructions for your email client.

Instructions

1. Double-click and open the email. ClickFilethen click onSave As.
Microsoft for windows screen grab

2. Appropriately name the message, select your save location, and then clickSave.
Microsoft outlook for Windows screen grab
 

3. Compose a new email addressed to security@ucla.edu, and attach the saved phishing email from the location it was copied to. Use a subject line that identifies the email as a phish.

Microsoft outlook for windows screen grab 3


a. If you are replying to an existing open phish report, attach that saved phishing email as a reply to that message.

Microsoft outlook for Windows screen grab
1. Click one to highlight the email andClick,Hold,Drag, andReleasethe email to your Desktop or desired location to copy.
Microsoft outlook for Mac screen grab

a. Compose a new email addressed tosecurity@ucla.edu, and attach the saved phishing email from the location it was copied to. Use a subject line that identifies the email as a phish.
Microsoft outlook for Mac screen grab

2. Alternatively, using the keyboard shortcutControl+⌘ (Command) +Jwill compose a new message with the original email attached. 
a. Address this email tosecurity@ucla.eduwith a subject that identifies the email as a phish.
Microsoft outlook for Mac screen grab
1. When viewing the message you wish to report, click on the drop-down arrow next to the reply button.
2. Click onShow Original, and a new tab on your browser will open.
 
Microsoft outlook for Gmail screen grab


3. On the new tab, clickDownload Original.
a. Compose a new email addressed tosecurity@ucla.edu, and attach the saved phishing email from the location it was copied to. Use a subject line that identifies the email as a phish.
  1. Microsoft outlook for gmail screen grab


Send the resulting message and attachment to security@ucla.edu with a subject line identifying the message as a phishing report.