Spot and report a phishing or scam email
IT Processes · 5 views · 🧭 Guided walkthrough
How to recognise a phishing/scam email, what never to do, and how to report it — plus what to do if you already clicked.
Prefer the full text? See all steps at once
Phishing emails try to trick you into giving up your password, an OTP, money, or into opening a harmful attachment.
HOW TO SPOT ONE
• Urgency or threats — "your account will be closed", "pay now", "act within 1 hour".
• A sender address that doesn't match the name, or a lookalike domain (iksuIa.com with a capital i, gooogle.com, etc.).
• Links that don't go where they claim — hover over a link to see the real address before clicking.
• Unexpected attachments (.zip, .html, invoices you didn't expect).
• Any request for your password, OTP/2FA code, bank details or gift cards — Iksula IT and HR will NEVER ask for these by email.
WHAT NOT TO DO
• Don't click links or open attachments in a suspicious email.
• Don't reply, and don't share your password or OTP with anyone.
• Don't scan unexpected QR codes in emails.
HOW TO REPORT IT
• In Gmail, open the message > three-dot menu > "Report phishing".
• Forward it to [email protected] so IT can warn others.
IF YOU ALREADY CLICKED OR ENTERED YOUR PASSWORD
• Change your Google password immediately (myaccount.google.com), and turn on 2-Step Verification.
• Tell IT right away by raising a ticket — quick action limits any damage.
• If you ran a downloaded file, see "Got a virus or 'malicious activity' warning? Do this immediately".
HOW TO SPOT ONE
• Urgency or threats — "your account will be closed", "pay now", "act within 1 hour".
• A sender address that doesn't match the name, or a lookalike domain (iksuIa.com with a capital i, gooogle.com, etc.).
• Links that don't go where they claim — hover over a link to see the real address before clicking.
• Unexpected attachments (.zip, .html, invoices you didn't expect).
• Any request for your password, OTP/2FA code, bank details or gift cards — Iksula IT and HR will NEVER ask for these by email.
WHAT NOT TO DO
• Don't click links or open attachments in a suspicious email.
• Don't reply, and don't share your password or OTP with anyone.
• Don't scan unexpected QR codes in emails.
HOW TO REPORT IT
• In Gmail, open the message > three-dot menu > "Report phishing".
• Forward it to [email protected] so IT can warn others.
IF YOU ALREADY CLICKED OR ENTERED YOUR PASSWORD
• Change your Google password immediately (myaccount.google.com), and turn on 2-Step Verification.
• Tell IT right away by raising a ticket — quick action limits any damage.
• If you ran a downloaded file, see "Got a virus or 'malicious activity' warning? Do this immediately".
phishingscamsuspicious emailspamfraudreportsecurityspoof