Summary

This guide helps you troubleshoot and resolve: How to Report Phishing Emails to Scamwatch and ACSC. Follow the steps below to fix the issue.

Common Causes

How to Report Phishing Emails to Scamwatch and ACSC

Phishing emails are fraudulent messages designed to trick you into revealing sensitive information such as passwords, banking details, or business data. Reporting these messages to Scamwatch and the Australian Cyber Security Centre (ACSC) helps authorities track cyber fraud trends and protect other Australian small businesses from similar attacks.

Steps to Report Phishing Emails

1. Do not click any links or open attachments in the suspicious email.
2. Forward the email as an attachment to Scamwatch at [email protected].
3. Report the incident to the ACSC via ReportCyber.
4. Delete the email from your inbox and empty your Deleted Items folder.

Detailed Instructions

Forwarding the Email as an Attachment

Forwarding an email as an attachment preserves the message headers, which investigators need to trace the origin of the phishing attempt.

Outlook Desktop (Windows)

1. Select the phishing email in your inbox.
2. Go to the Home tab on the ribbon.
3. Select More Respond Actions > Forward as Attachment.
4. Address the new message to [email protected].
5. Add a brief description of how you received the email.
6. Select Send.

Outlook on the Web

1. Open the phishing email.
2. Select the three dots (...) in the top-right corner of the message.
3. Choose Forward as attachment.
4. Address the new message to [email protected].
5. Select Send.

Apple Mail

1. Select the phishing email.
2. Go to File > Share > Email.
3. In the new message window, drag the original email from your inbox into the message body to attach it.
4. Address the message to [email protected].
5. Select Send.

Gmail

1. Open the phishing email.
2. Select the three dots (More) next to the Reply button.
3. Choose Show original.
4. Select Download Original to save the .eml file.
5. Compose a new email to [email protected].
6. Attach the downloaded .eml file.
7. Select Send.

Reporting to the ACSC via ReportCyber

1. Open your web browser and go to ReportCyber.
2. Select Report a cybercrime or cyber incident.
3. Choose whether you are reporting as an individual or on behalf of an organisation.
4. Complete the online form with details about the phishing email, including the sender address and any links or attachments it contained.
5. Submit the report and save your reference number for your records.

Troubleshooting

I Accidentally Clicked a Link

If you clicked a link in a phishing email but did not enter any details:

• Close the browser window immediately.
• Run a full scan with your antivirus or endpoint protection software.
• Clear your browser cache and history.
• Monitor your accounts for any unusual activity.

Warning: If you entered a password, banking details, or other sensitive information, change your passwords immediately and contact your financial institution.

The Email Will Not Forward as an Attachment

• Ensure you are using the Forward as Attachment option, not a standard forward.
• If using Outlook on the Web, try opening the email in a separate window first.
• As an alternative, save the email as a .msg or .eml file and attach it manually to your report.

Note: Never forward phishing emails to colleagues or friends as a warning. This can spread the threat if they accidentally interact with the message.

Still Having Issues?