report-phishing.md

To report a phishing message, send it to phishing@csail.mit.edu. If at all possible, please either forward it (with full headers) as an attachment, or use your mail client’s “bounce” or “redirect” function to redirect the message, leaving the original headers intact. But if your mail client doesn’t make that easy, feel free to just forward the message in whatever way is convenient.

We very much appreciate phishing reports submitted this way; they let us be proactive about blocking future similar phishing attempts, and/or warning other people (besides you) who may have received the same phishing attack. However, when you submit a phishing attempt this way, we’ll generally assume you know it’s a phishing attempt and you don’t need any further help with it, so you probably won’t get a response. If you have questions or comments about a phishing message you’ve received (or something you think is legitimate, but aren’t sure), please contact help@csail.mit.edu in the normal way, and we’ll reply.