Reporting a Phishing Scam

Although your first instinct may be to ignore or delete suspicious emails, we recommend that you report them to our security team. We will examine the email and, if necessary, advise you of any further steps you may need to take.

To report a phishing scam, forward the phishing email as an attachment to phish@pitt.edu. We will be introducing additional features in the near future to make the reporting process even easier.  

Reporting a phishing scam in Microsoft Outlook (Desktop client)

  1. Select the suspicious email in Outlook.
  2. Press Control-Alt-F (or Mac: COMMAND+F). This will open a draft email message with the suspicious email as an attachment.
  3. Add phish@pitt.edu in the To: field of the draft email message.
  4. Send the email.

 Reporting a phishing scam in Microsoft Outlook Online (Office 365)

  1. Select New to compose a new message.
  2. In the upper right-hand corner of the new message, click the icon to compose the message in its own window.
  3. Drag the suspicious email into the body of the new message. This will add the suspicious email as an attachment.
  4. Add phish@pitt.edu in the To: field of the draft email message.
  5. Send the email.
 Note: Please do not forward spam messages to phish@pitt.edu. Only forward email messages that you suspect are phishing scams.