Free tool

Report a Phishing Email

Tell us what you received and we'll get back to you with guidance. If you're part of an organization already working with Trawl, this also helps flag the campaign for your team.

Before you do anything else

01Don't click any links or open attachments in the email.
02Don't reply to the sender, even to ask questions.
03If it claims to be from someone you know, verify through a different channel — call them, don't use contact details from the email.
04If you already clicked a link or entered credentials, change that password immediately and notify your IT or security team.
05Forward the full email, including headers if possible, using the form here or to your internal security team.

Your name

Your email

Suspicious sender address

Where you received it

Subject line

What happened

Paste headers or the full message (optional)

Reports are reviewed by our team. This isn't a substitute for notifying your own IT/security team if you're part of an organization.

REPORT RECEIVED

Thanks — we've got it.

We'll follow up if we need more detail. If this affects your organization, loop in your internal security or IT team as well.