What should I do if I receive a phishing email?

If you receive an email that seems suspicious — for example, one asking you to make an urgent payment, confirm your bank details, or log in to an unfamiliar website — please do not click any links, open any attachments, or reply to the sender.

Report it immediately using the Report Phish button in Outlook:

• Highlight the suspicious email in your Inbox

• Click the three dots (...) on the far right of the top menu ribbon

• Select Report Phishing from the menu

The email will be moved to your Junk folder and forwarded to the Cyber Security Team, who will review it and contact you if further information is needed.

If you are accessing Outlook via a web browser or a device without the Report Phish button, you can forward the email as an attachment to phishing@surrey.ac.uk.