How to Forward a Suspected Spam or Phishing Email to the Information Security Office

To forward a suspicious email from Webmail to the Information Security Office (ISO) for analysis:

1. Create a new email message.
2. Click the Open Separate Window icon  at the top right corner of the new email message window. The email message opens as its own window within your browser.
3. Organize your browser windows so you can see your list of emails and the new message window.
4. Click and drag the suspicious email to the new message window. The suspicious email becomes an attachment to the new message. 
   Note: If your email is in Conversation view, the attachment will include all the messages within the conversation. To just attach a specific message, change your email display setting to Messages and then attach it.
5. In the new message window To: line, enter the address spam@stanford.edu.
6. In the new message Subject: line write "Reporting a potential email threat."
7. Enter any relevant information in the message text box.
8. Click Send.​
9. Delete the suspicious email.

To forward a suspicious email from Microsoft Outlook on your desktop to ISO for analysis:

1. Create a new email message.
2. Arrange your windows so you can see the main Outlook client window and the new message window.
3. Click and drag the suspicious email from your Outlook window to the new message window. The suspicious email becomes an attachment to the new message.
4. In the new message window To: line, enter the address spam@stanford.edu.
5. In the new message Subject: line, write "Reporting a potential email threat."
6. Enter any relevant information in the message text box.
7. Click Send.
8. Delete the suspicious email.