ProtonBlog(new window)

Now you can quickly report phishing emails and scams to Proton Mail

We have launched a new Report Phishing feature in order to improve the security of the entire Proton community.

Phishing scams(new window) are among the most effective kinds of online attacks. Cyber criminals create emails that try to get you to click on malicious links, download malware, or send sensitive information, such as your login credentials or banking information. Phishing attacks can target any email account, and encrypted email is no exception.

Today we’re announcing a new tool called Report Phishing to help defend the Proton community from these kinds of attacks. When you receive a phishing email, you can now easily report it to our security team. This will allow us to perform analysis and update filtering rules to protect the entire Proton Mail community. This article explains what phishing is and how to use the Report Phishing feature from your web browser or Proton Mail mobile app.

What is phishing?

An email phishing attack(new window) is a type of scam that uses legitimate-looking emails to trick people into giving up their account credentials or downloading malware. Some phishing emails can be extremely sophisticated, using social engineering tactics or a forged “From” address. They might appear to come from someone you know or companies you trust.

Unexpected requests for banking or other personal information should be treated extremely suspiciously. All legitimate emails from Proton Mail have an Official badge in your inbox; if an email claiming to be from us does not have this badge, then it is a phishing attack.

In addition to this, we only send emails from the following domains.

  • no-reply@news.proton.me
  • no-reply@news.protonvpn.com
  • no-reply@news.proton.me
  • no-reply@news.protonvpn.com
  • no-reply@mail.proton.me
  • no-reply@calendar.proton.me
  • no-reply@drive.proton.me
  • no-reply@vpn.proton.me
  • no-reply@offers.proton.me
  • no-reply@offer.protonvpn.com
  • no-reply@notify.proton.me
  • no-reply@notify.protonvpn.com
  • no-reply@verify.proton.me
  • no-reply@recovery.proton.me
  • no-reply@partners.proton.me
  • no-reply@referrals.proton.me
  • contact@protonvpn.com
  • support@protonmail.zendesk.com
  • contact@proton.me

If you receive an email that claims to be from Proton but does not come from one of the above domains, please report it (as described below).

Learn more about preventing phishing attacks(new window)

How to report email scams in Proton Mail

The most important thing about phishing scams is to NOT click on any links or download any attachments. If you receive a phishing email, please report it because that helps us keep everybody in the Proton community safer.

app ios report phishing

We have now made it easy to report email scams from within your Proton Mail Mailbox. If you receive an email you believe to be a phishing scam, click on the “More” arrow button on the right side of the Proton Mail web app. Then choose “Report phishing” from the dropdown options.In the iOS and Android apps, tap on the “More” button in the top right of the screen while a message is open, and choose “Report phishing” from the menu.

In the web and mobile apps, click “Confirm” in the popup window that appears. Clicking “Confirm” means that you give Proton Mail permission to analyze the message and header(new window) information to improve our spam filters.

By leveraging the vigilance of millions of Proton Mail users, we can all now do our part to help improve the security of the entire community. Thank you for your support.

Sign up and get a secure email(new window) account from Proton Mail.

We also provide a free VPN service(new window) to protect your privacy.

Proton Mail and Proton VPN are funded by community contributions. If you would like to support our development efforts, you can upgrade to a paid plan(new window). Thank you for your support!

Secure your emails, protect your privacy
Get Proton Mail free

Related articles

passwordless future
With the advent of passkeys, plenty of people are predicting the end of passwords. Is the future passwordless, though? Or is there room for both types of authentication to exist side-by-side?  At Proton, we are optimistic about passkeys and have int
At Proton, we have always been highly disciplined, focusing on how to best sustain our mission over time. This job is incredibly difficult. Everything we create always takes longer and is more complex than it would be if we did it without focusing on
is icloud keychain safe
If you’re on any Apple device, you’re familiar with the iCloud Keychain, the Apple password manager. It’s a handy tool that stores passwords for you and helps you manage your logins.  For a program that stores all your most sensitive data in one pla
We recently announced that Proton Pass now supports passkeys for everyone across all devices. Universal compatibility is a unique approach to implementing passkeys, unfortunately. Even though passkeys were developed by the FIDO Alliance and the Worl
How to upload and share private video
Your private videos are for your eyes only. However, not all cloud storage services are good at storing videos securely, let alone privately. In this article we explain what you can do to keep file sharing companies from having access to the videos y
Many email services, citing security reasons, require a phone number for identity verification. This creates an unfortunate paradox in which you must give up a highly sensitive piece of personal data to Big Tech. But there are simple ways to create
Can you password-protect a folder in Google Drive?
Protecting a folder with a password is a simple yet effective way of securing files. You may wonder whether you can password-protect a folder in Google Drive. We explain what access controls Google Drive offers and what you can do to improve your sec