Reporting Phishing & Junk Emails

Phishing emails are a type of online scam where criminals impersonate legitimate organizations via email to try to steal your sensitive information. As part of the ongoing effort to protect students, faculty, and staff against phishing emails and other cyber attacks, BYU-Idaho has partnered with the Church Educational System Security Operations Center (CESSOC). The CESSOC has a breadth of experience mitigating cyber threats and currently protects several other Church-sponsored institutions.

This article explains the procedure for reporting potential phishing emails to the CESSOC. It is important that the suspect phishing email is attached as an email file instead of forwarded.

Not sure if you've been phished? Check out the article Detecting Phishing.


Preferred Method

Using the "Report" Function in Outlook

If you suspected that you have received a phishing email or other scam emails, keep all interactions with the email to a minimum. The best way to report these emails is to use the built-in "Report" Function of Microsoft Outlook. 

When you preview an email you can select the "Report" drop-down menu. Select the "Report phishing" option.

Report menu

After you have reported the email, and if you are worried about your information's security, you should change or reset your password. You can do this process yourself or you can call or chat with the IT Service Desk and they can help you with your password reset.

Make sure to have your I-Card or other Government ID ready when you call the IT Service Desk for a password reset. They will also ask you for verifying information like your SSN.


Alternative Methods

If for whatever reason this process does not work for you you can follow the following instructions based on your way of accessing your school email. You can send the phishing email, as an attachment, to to report the phishing or scam email.


From the Outlook Webapp (accessed through your BYU-Idaho account)

1. Sign into your BYUI account and open the Outlook webapp. sidebar

2. In your Outlook inbox, select New Message.

New Message

3. After the new message opens, select the Open in a new window button in the top right-hand corner of your new message.

square with an arrow

4. After the new window opens, create a split screen between your email inbox and the new window so that both are visible. Address the new email to

new email draft

5. In your inbox, click and drag the suspect phishing email over to the body text field of your new message draft. 

drag and drop email

6. You will see the phishing email appear as an attachment in the body of your new message draft.

email attachment

7. Click Send. There is a Send button at the top and the bottom of the email draft, either one will work.



From the Outlook Desktop App app on PC (installed and accessed on your desktop computer)

1. Open the Outlook Desktop App.

2. Select the suspect phishing email in your inbox.

selected email

3. Select More from the Respond section of the Home tab. This will open a drop-down menu with the option Forward as Attachment.

Forward as attachment

4. Select Forward as Attachment. This will open a new message draft in a new window with the suspicious email as an attachment.

email draft

5. Address the new message draft to

enter to email

6. Click Send.



From the Outlook Desktop App on Mac (installed and accessed on your desktop computer)

1. Open the Outlook Desktop App

Outlook app

2. Find the suspect phishing email and right click the email.

right click menu

3. Select Forward As Attachment from the drop-down menu.

forward as attachment

3. A new message draft window will open with the suspicious email attached. Address the email to

enter to email

4. Click Send.


Contact Us

If you still need help, call us at (208) 496-9009 or start a Live Chat with us.

Hours of Operation: Mon - Fri 7:30 AM - 8:00 PM, Sat 10:00 AM - 4:00 PM Mountain Time

(excluding weekly devotional, forum hour and University Recognized holidays)

Print Article


Article ID: 11756
Mon 10/24/22 4:14 PM
Fri 7/5/24 3:42 PM

Related Articles (6)

- Basic information to grant your devices access to the BYU-Idaho email.
- Learn how to add contacts
- Learn how to create contact lists
- Mass email policy
- Exceptions
- Procedure
- Using Bcc
- Texting from Email
- Faxing from Email
- Delaying Email
- Staying safe from email attacks
- Recognizing common email threats
- Reporting spam from Outlook
- Use this article if you would like someone else to also be the recipient of your Outlook emails