Report Phishing Emails

To keep the City of Brunswick's network and data secure, it’s critical that we all know how to recognize and report phishing emails quickly and correctly.

We use KnowBe4’s Phish Alert Button (PAB) to make this easy and consistent across platforms. 

Below are step-by-step instructions for reporting phishing emails in:

  • Outlook Web App (OWA)

  • Outlook Desktop App

  • Outlook Mobile App


🔹 Outlook Web App (OWA – via browser)

  1. Open your email in your web browser (e.g., mail.office365.com).

  2. Click to open the suspicious email.

  3. At the top-right corner of the email, click the Phish Alert Button (PAB) — it may appear as a hook icon or labeled "Phish Alert".

  4. Confirm submission when prompted.


🔹 Outlook Desktop App (Windows or Mac)

  1. Open Outlook on your computer.

  2. Select the suspicious email.

  3. In the toolbar at the top (ribbon), click the Phish Alert Button (PAB).

  4. When prompted, confirm that you want to report the email as phishing.


🔹 Outlook Mobile App (iOS & Android)

  1. Open the Outlook app on your mobile device.

  2. Open the suspicious email.

  3. Tap the three dots (•••) in the upper right.

  4. Scroll down and select Phish Alert from the list.

  5. Confirm your report when prompted.


⚠️ Watch for These Common Phishing Red Flags

  • Unfamiliar senders or unexpected emails

  • Urgent language or pressure to act fast

  • Suspicious links or attachments

  • Requests for passwords or sensitive info


When in doubt, use the Phish Alert Button.
Reporting helps protect the entire organization from attacks. If you have any issues with the button or need help, reach out to the IT Help Desk at it@cityofbrunswick-ga.gov or extension 5535.

Thank you for your continued vigilance!