Reporting Spam/Phishing Email Attempts

Overview

Despite the best efforts of IT administrators refining email filters, spam/phishing email attempts will sometimes get through.  This article describes the steps to take if you believe you have received a spam/phishing email attempt.

Procedures

If you are unsure if it is a phishing email, always err on the side of caution and then:

1. If using any of the below Email Clients, please report potential Spam or Phishing emails through Microsoft Exchange Online Protection (EOP) -  Report Suspicious Message to Microsoft from Outlook
    
   • Outlook 365 Desktop Application
   • Outlook Web Application (OWA)
   • Outlook for Android
   • Outlook for iPhone
      

2. If you are not using Outlook as your email Client, please forward any potential Spam or Phishing emails to phishing@rpi.edu.  Our AI Security Analyst, PhishStick, will complete triage of the email and send a response with confirmation if the email was Safe, Phishing, Spam or part of a Phishing Simulation.  
   
   Please see examples below of Non-Outlook email clients:

   • Mozilla Thunderbird
   • Apple Mail
   • Apple Mail on iOS
   • SparkMail
      

   After the email is reported to phishing@rpi.edu, please do not respond and delete the email. 
    

3. If you have received a suspicious email particularly requesting you to click on links, provide personal identifying, financial or account login information DO NOT click on anything or respond.
    
   • Please review the article Report Suspicious Message to Microsoft from Outlook, and report the message through the Outlook Desktop Application, or Outlook Web Application.
   • If you clicked on any links, attachments, and feel you compromised your RCS account please follow the steps in this article: Steps to follow if you feel your RCS/Email Account has been compromised
      
4. If you have any other questions or concerns, please submit a support request, and we would be happy to assist further. 

References/Links

IT Services and Support Center - Spam and Phishing Awareness Articles 

How do you know if you received a Phishing or Spoofing Email?

Reporting Suspicious Messages to Microsoft

Last Reviewed:   23-Jan-2026