What's the difference?
Watch our video, or read on below, to learn the difference between spam, phishing, and how to report it.
What is spam and how do I report it?
Unexpected, unwanted messages generally soliciting goods or services are considered spam. These messages may be irritating and try to sell you something, but are not commonly trying to compromise your security.
Report these messages using Google's "Report Spam" button, located above the message.
Clicking this button moves the email to Spam, helps train Google, and spikes in spam reports alert Baker IT to potential issues.
What is phishing and how do I report it?
Like spam, phishing is unwanted, but there's intent to compromise your device and/or information. Phishing may be presented with a sense of urgency to perform an action to avoid an unwanted outcome, like an account deletion.
To assist IT investigating threats, please only report phishing and not spam using the "Report Phishing" button. You'll find it located in the "More" (3 dot) menu next to the email message.
Clicking this button deletes the email, helps train Google, may assist in stopping an active phishing campaign, and alerts Baker IT.
If something seems suspicious:
If you think the message is odd, but possibly legitimate, reach out to the sender via another trusted form of communication before interacting with it. Some examples: call or text a known number, use instant messaging, or visit the sender's office if you are located at the same location.
If you're concerned:
Use the reporting methods above or contact IT if you are unsure of the type of message you are working with. Submit a ticket at services.baker.edu. PLEASE do not forward the message to other users.
What if I'm on a mobile device/browser?
As of the writing of this article, there is a Report Spam button in Gmail while using a mobile browser, Android and iOS apps. However, there is no Report Phishing button. You'll need to report phishing from a full web browser. We do still have the option to forward the message to abuse@baker.edu. That method doesn't give the benefit of training Google automatically, but it does still alert Baker IT.