Skip to content Skip to site navigation

How to Forward a Suspected Spam or Phishing Email to the Information Security Office

To forward a suspicious email from Webmail to the Information Security Office (ISO) for analysis:

  1. Create a new email message.
  2. Click the Open Separate Window icon Webmail email window icon at the top right corner of the new email message window. The email message opens as its own window within your browser.
  3. Organize your browser windows so you can see your list of emails and the new message window.
  4. Click and drag the suspicious email to the new message window. The suspicious email becomes an attachment to the new message. 
    Note: If your email is in Conversation view, the attachment will include all the messages within the conversation. To just attach a specific message, change your email display setting to Messages and then attach it.
  5. In the new message window To: line, enter the address spam@stanford.edu.
  6. In the new message Subject: line write "Reporting a potential email threat."
  7. Enter any relevant information in the message text box.
  8. Click Send.​
  9. Delete the suspicious email.

To forward a suspicious email from Microsoft Outlook on your desktop to ISO for analysis:

  1. Create a new email message.
  2. Arrange your windows so you can see the main Outlook client window and the new message window.
  3. Click and drag the suspicious email from your Outlook window to the new message window. The suspicious email becomes an attachment to the new message.
  4. In the new message window To: line, enter the address spam@stanford.edu.
  5. In the new message Subject: line, write "Reporting a potential email threat."
  6. Enter any relevant information in the message text box.
  7. Click Send.
  8. Delete the suspicious email.

To forward a suspicious email from Gmail to ISO for analysis:

  1. From a browser, open Gmail.
  2. Open the suspicious email.
  3. Next to the Reply arrow icon , click the down arrow .
  4. Click Show original.
    The headers will show in a new window, including the authentication results field.
  5. Highlight and copy all of the text in the box below Download Original.
  6. Return to Gmail.
  7. Create a new email.
  8. Paste the contents of the text box into the message of the new email.
  9. Send the email to spam@stanford.edu.

To forward a suspicious email from Inbox by Gmail to ISO for analysis:

  1. From a browser, open Inbox by Gmail.
  2. Open the suspicious email.
  3. Inside the email, click the more icon .
  4. Click Show original.
    The headers show in a new window, including the authentication results field..
  5. Highlight and copy all of the text in the box below Download Original.
  6. Return to Inbox by Gmail.
  7. Create a new email.
  8. Paste the contents of the text box into the message of the new email.
  9. Send the email to spam@stanford.edu.
Last modified January 16, 2018