Handling Suspicious Emails

Quick steps for PDR employees to identify and report suspicious emails, keeping accounts and systems secure.

Step 1: Stop & Don’t Interact

• Do NOT click links, download attachments, or reply.

• Example: “Your account will be locked unless you click here” → do not click.

⚠️ Already clicked a link or downloaded an attachment? Skip to Step 4.

Step 2: Check for Warning Signs

Email may be suspicious if:

• From an unknown/unexpected sender

• Requests passwords, codes, or personal info

• Uses urgent or threatening messages

• Has unexpected links/attachments

Tip: Hover over links—if the address looks strange, do not click.

Step 3: Report the Email (No Ticket Usually Needed)

Option A: Use Email Client (Gmail)

1. Open email → Click three dots (More options) → Report phishing/spam

2. No ticket needed

Option B: Screenshot for Reference

• Take a screenshot (do not forward email)

• Include sender’s email

• Keep for IT reference

Step 4: Create a Support Ticket Only If Necessary

Submit a ticket if:

• Cannot report via email

• Clicked a link or downloaded attachment

• Keep receiving the same suspicious email

Include:

• Screenshot of email

• Sender’s email

• Short reason why it’s suspicious

Do not forward the actual email unless IT/SDA asks.

Step 5: What Happens Next

• IT/SDA reviews email → safe / phishing / internal test

• Safe/test → no action needed

• Malicious → IT/SDA guides next steps (password reset, security checks)

✅ Tip: Following these steps protects your account and keeps company systems secure.