How to Report a Phishing Email in Gmail on Android

"Your account will be closed today. Click here to verify now." Emails like this land in millions of inboxes every day. They look like they come from a bank, a delivery company, or Google itself — but they are fake. Their only goal is to steal your password, OTP, or bank details. The good news: Gmail gives you a one-tap way to fight back. Reporting the email helps Google block the same scam for everyone else.

A phishing email pretends to be from a trusted company. Report it, do not reply to it.

What Is a Phishing Email?

Phishing is a trick where a scammer sends an email that pretends to be from a company you trust. Common signs include:

• An urgent threat, like "your account will be blocked in 2 hours".
• A link that looks real but goes to a fake login page.
• A sender address that is slightly misspelled, like "support@goog1e.com".
• An attachment you were not expecting.
• A request for your password, OTP, or card details. Real companies never ask for these by email.

If an email shows any of these signs, do not click anything inside it and do not reply to it.

Learn how to check a suspicious link before you click it.

How to Report a Phishing Email in Gmail on Android

Follow these steps in the Gmail app:

1. Open the Gmail app and open the suspicious email. Do not tap any link or button inside it.
2. Tap the three-dot menu at the top right of the email screen.
3. Tap "Report phishing".
4. Confirm by tapping "Report phishing" again in the pop-up.

Gmail will move the email out of your inbox and send a report to Google's safety team. Reporting also teaches Gmail's filters, so similar scam emails are more likely to be blocked in the future.

The report option sits in the three-dot menu of the open email.

Four steps to report a phishing email.

Report Phishing or Report Spam — What Is the Difference?

Gmail offers both options, and they are not the same:

• Report phishing: Use this for emails that try to steal your information or trick you into a fake login page.
• Report spam: Use this for unwanted advertising or bulk mail that is annoying but not a scam.

Choosing the right option helps Google take the right action, so always pick "Report phishing" for scam emails.

What to Do If You Already Clicked

If you clicked a link or entered details before realising it was fake, act fast:

• Change your password for that account immediately, from the real app or website (never from the email link).
• Turn on two-factor authentication if it is not already on.
• If you shared bank or card details, contact your bank at once.
• And remember: never share your OTP with anyone, even if the caller or email claims to be from your bank.

Urgent threats and strange sender addresses are classic phishing signs.

FAQ

Q: Does reporting a phishing email delete it? A: Yes, the reported email is removed from your inbox once you confirm the report.

Q: Will the scammer know I reported them? A: No. Reports are private, and the sender is not told who reported the email.

Q: What if Gmail already put the email in Spam? A: That means Gmail already caught it. You can still open it from Spam and report it as phishing to strengthen the block.

Have you ever received a phishing email? What did it pretend to be? Share your experience in the comments so others can learn to spot it too.