Reporting Phishing and Junk Mail, How You Can Contribute to Protecting Us All

UK Information Technology Services (UK ITS) would like to encourage all students, faculty, and staff to contribute to UK’s cybersecurity posture by becoming familiar with the best ways to report unwanted emails in your inbox. 

Phishing, Junk, and Graymail -- What are they? What’s the difference?  

Phishing is defined as emails that attempt to obtain sensitive information, such as usernames, passwords, and credit card information for malicious reasons. Junk, also referred to as spam, is a term for unsolicited messages sent to your email account. It is important to note that while all phishing is considered junk or spam, not all junk is phishing. While junk mail is unsolicited, it is typically not malicious (e.g., advertisements, promotional mailing lists). Graymail is similar to junk mail in that it is bulk mail, but it is solicited. For example, graymail may be a newsletter from a retailer that you opted in to. Many times, we opt in to graymail without realizing it. Knowing the difference between these email types helps to report the messages correctly. 

What is the best way to report? 

Both Microsoft and Google have sophisticated tools for reporting phishing and junk mail. In Microsoft Outlook, the “Report Message” button allows you to report emails as either “Junk” or “Phishing”. Google has a similar way to report phishing and spam within Gmail. Reporting this way helps all of us at UK by providing both Microsoft and Google with information that can power their email filters. Smarter email filters mean there is a less likely chance for you to get similar phishing or junk mail again in the future. Detailed instructions on how to report unwanted email in Outlook or Gmail can be found in How do I report spam and phishing emails? from the Tech Help Center (techhelpcenter.uky.edu). 

Not sure whether an email is safe? 

For tips and tricks on how to detect phishing, UK ITS recommends visiting the #CyberSafeCats website at https://its.uky.edu/cybersafe. There, you can read articles, watch videos, and sign up to receive ITS’ Phishing Newsletter. If you are still unsure whether an email is phishing, send the original email as an attachment to IsThisEmailSafe@uky.edu. If an email that you determine suspicious is delivered to a junk folder or is quarantined by Microsoft or Google, there is no need to further report. ITS asks that you please do not pull any messages out of junk to report to IsThisEmailSafe@uky.edu. If you have fallen for a phishing attack that has resulted in compromised personal or financial information, please see What should I do if I've fallen victim to a spam or phishing attack? for next steps. 

UK ITS appreciates the cooperation of us all to report phishing and junk mail appropriately in order to keep us all safe from attacks. These reports continue to make our inboxes safer at UK and continue to help UK ITS be proactive against the ever-evolving threats to our cybersecurity at UK.