How do users report phishing to Gmail or Outlook?

**Gmail**: click the three-dot menu next to reply and select "Report **phishing**." This reports to Google and moves the message to spam. Reporting helps train detection systems and potentially triggers account review.

**Outlook**: use the "Report message" button (if enabled by organization) or forward to phish@office365.microsoft.com. **Microsoft Defender** for **Office 365** users have built-in reporting buttons.

Both providers use reports to improve detection, investigate campaigns, and potentially take action against attacker accounts or infrastructure. User reporting is valuable threat intelligence that benefits everyone.