Phishing E-mails - Report Suspicious Messages

Last Updated: 11/07/2018

Overview

Keeping the campus community safe from malicious attempts to steal personal information, also known as phishing, requires constant vigilance. Because phishing attempts often target only a select number of people in the campus community, our ability to alert the campus is dependent on people like you reporting any suspected phishing attempts. We appreciate your willingness to report phishing attempts as it makes the Internet a safer place for the entire campus community.

If you have received a message that you believe could be a malicious attempt to gain personal information and it is not already listed on the Phishing Emails page, please report it. To report a message you suspect to be an email scam or phishing attack, please send that message as an attachment (RFC-822 MIME encoded) to phish@colorado.edu.

If you do not know how to send a message as an attachment, please follow the directions below for your email program. When the message is sent as an attachment it includes header information which can be used to identify the source of the message which can in turn help us block delivery of the message to other people on our campus or prevent visits to phishing sites.

How to Send a Message as an Attachment

Apple Mail
  1. Click on the email you want to forward
  2. Select File Save AsFormat - Raw Message Source
  3. Create a new message
  4. Attach raw source file(s) to the new message
  5. Send to phish@colorado.edu​ with "PHISHING" in the subject line.
Gmail
  1. Open the message you want to forward.
  2. Click the Forward link in the box below the message.
  3. Add the new recipient(s) and any additional text to your message.
  4. Send to phish@colorado.edu​ with "PHISHING" in the subject line. Click Send.
Microsoft Outlook 2013 (Windows)
  1. Click New Email to start a new message.
  2. Click Attach Item.
  3. Select Outlook Item.
  4. In the Insert Item window, browse to the folder with the email message you want to attach.
  5. Click OK.
  6. Send to phish@colorado.edu​ with "PHISHING" in the subject line.

Shortcut: 

  1. Select the suspicious email.
  2. Hit Control-Alt-F on your keyboard to forward the suspicious email as an attachment.
  3. Send to phish@colorado.edu​ with "PHISHING" in the subject line.
Microsoft Outlook 2016 (Mac)
  1. Right-click the suspicious message.
  2. Choose Forward As Attachment.
  3. Send to phish@colorado.edu​ with "PHISHING" in the subject line.
Office 365 Outlook Web App
  1. In the upper left-hand corner click on the + icon then select New message
  2. Drag the suspicious email into the body of the new message. This will add the suspicious email as an attachment.
  3. Send to phish@colorado.edu​ with "PHISHING" in the subject line.
Mozilla Thunderbird
  1. Click on the email you want to forward.
  2. Select Message, then Forward As, and then select Attachment.
  3. Send to phish@colorado.edu​ with "PHISHING" in the subject line.
PINE
  1. Open PINE
  2. Configure PINE to display full headers if you have not already done so
    • M (Main Menu)
    • S (Setup) Choose a setup task from the menu below:
    • C (Configure)
    • Scroll down to Advanced Command Preferences, and press X to set enable-full-header-cmd.
  3. After checking enable-full-header-cmd Forward a message an attachment as follows:
  4. Select the message
  5. Press Enter to read it
  6. Press the H key to display full headers
  7. Press the F key
  8. Type yes to forward as attachment