Overview and Key Features:
Phishing emails are fraudulent messages designed to trick you into sharing personal information, clicking malicious links, or downloading harmful attachments. Reporting suspected phishing helps protect both you and the wider university community.
The University provides two ways to report phishing:
-
- A dedicated email address for reporting suspicious messages
- A U of T Report Phishing button in Outlook (when available)
Both methods send the message to the same security team for review.
Getting Started:
If you receive a suspicious email:
-
- Do not interact with the message.
- Don’t click links
- Don’t open attachments
- Don’t reply to the sender
Report the email using one of the options below:
Option 1: Use the Outlook “U of T Report Phishing” button
-
- Available in Outlook on the web and most desktop versions
- Select the email, then choose U of T Report Phishing from the toolbar
- The message is submitted automatically and can then be deleted
![]()
Option 2: Forward the email to the phishing mailbox
-
- Forward the message to: report.phishing@utoronto.ca
- Do not modify the subject line or content
- Delete the email after sending
Note: If the Outlook reporting button is temporarily unavailable, forwarding the email is the correct and supported alternative.
If you already clicked a link or opened an attachment:
-
- Contact your local IT support as soon as possible
- Acting quickly helps limit potential impact
Get Help:
-
-
Reporting phishing:
Email report.phishing@utoronto.ca -
Concerned you may be compromised:
Contact your local IT support desk immediately -
Outlook button not appearing:
You can still report phishing by forwarding the email to the address above
-