Phishing reportingRaise the reporting rate with the Gmail add-in
One button in the inbox. Suspicious mail goes to Moxso for analysis and to Google as a report — and reporting itself becomes part of your risk picture.
Why a report button matters
Phishing is still the easiest way into an organization, and it arrives by email. A visible "Report phishing" button in every inbox does two things at once: it gives employees a correct action to take, and it turns each report into signal for the security team.
Add-ins for Gmail are validated by Google, and the add-in only has access to the mailbox you connect with Moxso.
What happens when someone reports
When an employee reports a suspicious email:
- The email is sent to Moxso for analysis.
- The email is reported to Google.
- The email is removed from the inbox.
- Real (non-simulation) emails are flagged and escalated.
- Reporting rates are tracked per employee and feed the risk picture.
If it was one of Moxso’s simulations, the report is scored to the employee’s credit. If it was a genuine phishing attempt, Moxso analyzes it and reports it onward to Google.
See the security overview for more context on data handling. Review email-data handling