You can report a phishing message using Gmail’s own menu without following any link inside it. Phishing involves a deceptive attempt to obtain credentials, money, access, or private information. A polished logo, urgent tone, or authenticated sending domain does not make the request trustworthy.
Report through the individual message menu
- Open Gmail on a computer and identify the suspicious message.
- Do not click its links, scan its QR codes, or download its attachments.
- Beside Reply, open More.
- Choose Report phishing.
Use this menu rather than a report or verification button designed into the email. Opening the message to reach Gmail’s controls is different from interacting with the sender’s content.
Preserve evidence appropriately
For work mail, follow the organization’s reporting process as well. A security team may need the original message or headers through an approved private channel. Do not forward a dangerous attachment casually to colleagues or paste private headers into a public forum.
Google states that reporting or moving mail to Spam can provide Google with a copy of the email and attachments for abuse analysis. Keep that disclosure in mind when applying your organization’s incident-handling policy.
Respond to exposure separately
Reporting does not reverse information you already disclosed. If you entered a password after following the message, go directly to the affected service’s official security settings, change the exposed credential, and review account activity and other access. Check other accounts where you reused that password.
If money or financial information was involved, contact the relevant provider using a trusted channel promptly. Do not use recovery services advertised by the suspicious sender or pay someone who claims they can erase the incident.
If you reported legitimate mail by mistake, Gmail provides Report not phishing. Verify it independently before reversing the report. Reporting is an abuse signal and mailbox action, not a guarantee that the sender’s account will be closed or every future related message will be blocked.
Browse Gmail & Google Account help
References
Reviewed against the linked product guidance, standards, and identified vendor or public-authority guidance on October 29, 2026. Available options and screen labels can vary by account, device, region, and organization policy.