How to Report a Security Incident or Suspicious Email

What to do when something looks suspicious — and how to respond if your account is at risk

Reporting suspicious messages helps the Information Security Office protect the entire Aggie community. Use the steps below any time you receive something that looks unusual, malicious, or “off.”

When Should You Report Something?

Report immediately if you see:

• Suspicious emails, texts, or phone calls
• Unexpected attachments or shared files
• Requests for your username, password, or MFA codes
• Strange login prompts or password reset notices
• Unsolicited MFA prompts
• Possible financial scams or fraudulent checks
• Anything “off” that you’re unsure about

How to Report Using the Phish Alert Button (PAB)

For Outlook Desktop or Web

1. Open the suspicious message.

2. Click Phish Alert (PAB) in your Outlook ribbon.

3. Choose the appropriate classification:

   • Phishing (malicious links, credentials, files, pressure, etc.)

   • Spam/Junk (advertising, unwanted emails)

   • Unknown/Unsure if you’re not certain

4. Add a comment if you’d like (optional).

5. Click Send for Review and confirm.

Your report is automatically delivered to the Information Security Office.

Alternative Ways to Report
 

• Email Information Technology Services by forwarding the suspicious messages to: 
  InformIT@ncat.edu, or
• Contact the Client Technology Services:​​​​​​​
  • Walk Up Service:  Monday - Friday 8 a.m. - 5 p.m.
  • Telephone Support:  Monday - Friday 8 a.m. - 5 p.m., at (336) 334-7195
  • Email: helpdesk@ncat.edu

If you believe your account may have been compromised, or you interacted with a suspicious message, contact CTS immediately.