How to report phishing scams to Proton Mail’s security team

Phishing scams are one of the most common ways for hackers to gain access to your online accounts or plant malware on your device. By posing as a legitimate or trusted sender, an attacker tries to trick victims into clicking malicious links or downloading attachments.

Please note that all legitimate emails from Proton will come with an Official badge. If an email claims to come from us and doesn’t have this badge, it is a phishing attack and you should report it.

Please read our article about how to prevent phishing attacks(new window) to learn more.

If you suspect an email might be a phishing attempt, DO NOT click on links or download attachments. Simply mark the email as spam and report it to our security team.

If our security system detects a phishing attempt, it will display a special banner to warn you about the email’s contents.

How to report phishing to Proton Mail

Proton Mail encourages users to send suspected phishing attempts to the Proton Mail security team. This allows our staff to analyze the email and improve our spam filters, improving the safety of the entire Proton Mail community.

To report phishing in the web app:

1. Click on the arrow button located at the top left of the phishing email. Select Report phishing from the dropdown menu.

2. A popup window will appear asking for permission to allow Proton Mail to analyze the message and header. Click Confirm to send the message to our security team.

To report phishing in our mobile apps (Android or iOS/iPadOS):

1. With the phishing email open, tap the More (…) button at the top of the screen and select Report phishing.

2. A popup window will appear asking you to allow Proton Mail to analyze the message and header. Tap Confirm to send the message to our security team.