How to Report Phishing Emails
Where and how to report a phishing email: in Gmail and Outlook, to the company being impersonated (Apple, PayPal, Amazon, Netflix and more), and to national services in the US, UK and Australia.
Reporting a phishing email takes a minute and helps get the scam taken down. There are three places worth telling: your email app, the company being impersonated, and in some countries a national reporting service. Afterwards, delete the message.
Not sure it’s phishing? Check the sender in the sender checker or paste the headers into the header analyzer first.
1. Report it in your email app
Gmail
- On a computer, open the message.
- Next to Reply, click More.
- Click Report phishing.
Reported something by mistake? The same menu has Report not phishing.
Outlook.com
- Select the message in your message list.
- Above the reading pane, select Report → Report phishing.
Microsoft notes that reporting doesn’t block the sender. To stop their messages, add them to your blocked senders as well.
2. Tell the company being impersonated
| Pretending to be | How to report it |
|---|---|
| Apple | Forward the email to reportphishing@apple.com. For a text, send a screenshot to the same address. |
| PayPal | Forward the email to phishing@paypal.com, then delete it. |
| Amazon | Customers: use Amazon’s Report a Scam page. Not a customer: email reportascam@amazon.com. |
| Netflix | Forward the email to phishing@netflix.com. |
| DocuSign | Forward the email to spam@docusign.com, then delete it. |
| Dropbox | Forward the full email to abuse@dropbox.com. |
| Microsoft | Use Report phishing in Outlook, above. |
| Use Report phishing in Gmail, above. | |
| HMRC (UK) | Forward emails to phishing@hmrc.gov.uk and texts to 60599. |
| IRS (US) | Send the email to phishing@irs.gov with the subject “IRS”. Forward scam texts to 7726. |
Each company’s own instructions are linked in the official sender directory.
3. Report it to a national service
United States
Forward phishing emails to the Anti-Phishing Working Group at reportphishing@apwg.org, and report the attempt to the FTC at ReportFraud.ftc.gov.
United Kingdom
Forward suspicious emails to report@phishing.gov.uk, the Suspicious Email Reporting Service. The NCSC says you can forward as many as you like; it analyses each email and the websites it links to and acts on what it receives, though it can’t tell you the outcome.
Scam texts go to 7726, free:
- iPhone: note the sender’s number, press and hold the message, tap More, select the message, tap the arrow, enter 7726 and send.
- Android: note the sender’s number, open the conversation, press and hold the message, tap the three dots, tap Forward, enter 7726 and send.
Australia
Report it to Scamwatch with its online form.
If you clicked, paid or gave details
Reporting comes second — first protect your accounts and money. What to do if you clicked a phishing link or gave your password covers it step by step, including where to report a crime if you lost money.
Then delete it
The FTC’s advice: once you’ve checked it out and reported it, delete the message. For spotting the next one, see how to spot phishing emails.
How this guide was checked · October 2026
Verified against 15 official sources
Every step, setting and limit in this guide was checked against the provider’s own documentation on support.google.com, support.microsoft.com, support.apple.com and 11 more. Anything we couldn’t confirm was left out.
- 01 Gmail Help: Avoid & report phishing emails support.google.com
- 02 Microsoft Support: Phishing and suspicious behavior in Outlook support.microsoft.com
- 03 Apple Support: Recognize and avoid social engineering schemes support.apple.com
- 04 PayPal: Phishing and spoof emails paypal.com
- 05 About Amazon: How to avoid Amazon scams aboutamazon.com
- 06 Netflix Help: Phishing or suspicious emails or texts claiming to be from Netflix help.netflix.com
- 07 DocuSign Trust Center: Malicious email campaign alert (May 2017) docusign.com
- 08 Dropbox Help: How to protect yourself from phishing and viruses help.dropbox.com
- 09 GOV.UK: Report HMRC phishing emails, texts and phone call scams gov.uk
- 10 IRS: Report fake IRS, Treasury or tax-related emails and messages irs.gov
- 11 FTC Consumer Advice: Protect yourself from phishing scams consumer.ftc.gov
- 12 NI Cyber Security Centre: Suspicious Email Reporting Service nicybersecuritycentre.gov.uk
- 13 NCSC: Report a scam email ncsc.gov.uk
- 14 NCSC: Report a scam text message ncsc.gov.uk
- 15 Scamwatch (Australia): Report a scam scamwatch.gov.au
Questions
Frequently asked questions
How do I report a phishing email in Gmail?
On a computer, open the message, click More next to Reply, then click Report phishing.
How do I report a phishing email in Outlook.com?
Select the message, then above the reading pane select Report → Report phishing. Reporting doesn’t block the sender, so add them to your blocked senders too.
Where do I forward phishing emails in the UK?
To report@phishing.gov.uk, the Suspicious Email Reporting Service. Forward scam texts to 7726 for free.
Where do I report phishing emails in the US?
Forward them to the Anti-Phishing Working Group at reportphishing@apwg.org and report the attempt to the FTC at ReportFraud.ftc.gov.
Where do I report a fake Apple or PayPal email?
Forward fake Apple emails to reportphishing@apple.com and fake PayPal emails to phishing@paypal.com.
Related guides
Keep reading
Yandex Mail Security
Yandex Mail Security: Yandex Key, App Passwords and Sessions
Protect your Yandex Mail with two-factor authentication, app passwords for email programs, a recovery phone and the log-out-everywhere switch.
3 min read
Mailfence Security
Mailfence Security: 2FA, Service Passwords and Connection History
Lock down a Mailfence account with two-factor authentication and backup codes, service-specific passwords for email programs, and the connections history log.
3 min read
Mail.com Security
mail.com Security: Two-Factor Authentication and a Hacked Account
Set up two-factor authentication on mail.com, keep your secret key safe, and work through mail.com’s steps if your account was hacked.
3 min read
Hushmail Security
Hushmail Security: Two-Step Verification and Safe App Access
Turn on Hushmail two-step verification, keep the backup code, connect email apps with the 20-character security code, and know what encryption does and doesn't cover.
2 min read
Security & Access Security
Fake Apple Account Emails and Texts: How to Tell
How to spot a fake Apple email or text: what Apple says it will never ask for, its warning signs, signs your Apple Account is compromised, and what to do and where to report.
3 min read
Security & Access Security
Fake PayPal Emails: How to Tell, and What to Do
How to spot a fake PayPal email and a fake PayPal invoice or money request: the signs PayPal lists, how to check safely, and what to do if you clicked or paid.
3 min read