Spam or Phishing - What To Do Immediately – Propeller

Use this when you receive a suspicious email or think you may have interacted with a phishing message.

At a glance

Use this when: Anyone who received a suspicious email, clicked a suspicious link, opened an attachment, or entered credentials.
Typical time: Submit immediately if you clicked or entered credentials
Priority signal: High if you clicked, opened an attachment, replied, or entered credentials.

Important

If you clicked a link, opened an attachment, or entered credentials, submit the ticket immediately and avoid further activity on that device until IT responds.

Quick checks

Do not reply to the message.
Do not forward it to other employees.
Do not click additional links or open attachments.
If your Outlook has a Report button, use it to report suspicious email.

Steps to try

Submit a Spam / Phishing ticket.
Answer whether you clicked links or opened attachments.
Include the suspicious sender and subject.
If you entered credentials, say that clearly in the ticket.
If the device behaves suspiciously, disconnect it from Wi-Fi or Ethernet and wait for IT.

Submit a ticket when

The sender, link, invoice, attachment, or request feels suspicious.
You clicked a link or opened an attachment.
You replied or entered credentials.
You are unsure whether the message is legitimate.

Include this in your ticket

Sender address and subject line.
Whether you clicked, opened, replied, or entered credentials.
Screenshot of the email if safe to capture.
Device name if the device may be affected.

Official references

Report suspicious messages to Microsoft