Phishing Email Investigation Checklist
Use this form to report and document details of a suspected phishing email for investigation and incident triage.
Reporter Full Name
*
First Name
Last Name
Reporter Email Address
*
example@example.com
Date and Time Email Was Received
*
-
Month
-
Day
Year
Date
Hour Minutes
AM
PM
AM/PM Option
Email Subject Line
*
Sender Display Name
*
Sender Email Address
*
Recipient Mailbox/Account
*
How was the suspicious email received or discovered?
*
Please Select
Directly received in inbox
Reported by another user
Detected by security system
Other
Checklist of Phishing Indicators Observed
*
Suspicious or mismatched sender address
Unexpected attachments or links
Urgent or threatening language
Requests for sensitive information
Spelling or grammar errors
Unusual formatting or branding
Other
Briefly summarize why the email seems suspicious
*
Were any links or attachments in the email opened?
*
No
Yes, links were clicked
Yes, attachments were opened
Yes, both links and attachments
Immediate actions already taken (e.g., reported to IT, deleted email)
*
Describe any impact or follow-up needed
*
Submit Investigation Report
Should be Empty: