How do users report phishing to Gmail or Outlook?

Gmail: click the three-dot menu next to reply and select "Report phishing." This reports to Google and moves the message to spam. Reporting helps train detection systems and potentially triggers account review.

Outlook: use the "Report message" button (if enabled by organization) or forward to phish@office365.microsoft.com. Microsoft Defender for Office 365 users have built-in reporting buttons.

Both providers use reports to improve detection, investigate campaigns, and potentially take action against attacker accounts or infrastructure. User reporting is valuable threat intelligence that benefits everyone.