When phishing is reported, which action should be taken first?

When phishing is reported, which action should be taken first?

• A. Reply to verify authenticity.
• B. Do not interact with the email.
• C. Ignore it and delete.
• D. Forward to security.

Answer: (B)

When you spot a potential phishing message, the safest move is to not interact with it at all. Any reply, link click, or credential entry can give attackers a chance to steal information, install malware, or verify that your address is active. By avoiding interaction, you reduce risk and preserve the message in its original state for investigation. The next step is to report the email to security or IT so they can analyze it, block the sender, and alert others if needed. Ignoring and deleting without reporting can leave the threat unchecked, and while forwarding to security is a good action, it should come after you have not interacted and have kept the message intact for proper analysis.

When you spot a potential phishing message, the safest move is to not interact with it at all. Any reply, link click, or credential entry can give attackers a chance to steal information, install malware, or verify that your address is active. By avoiding interaction, you reduce risk and preserve the message in its original state for investigation. The next step is to report the email to security or IT so they can analyze it, block the sender, and alert others if needed. Ignoring and deleting without reporting can leave the threat unchecked, and while forwarding to security is a good action, it should come after you have not interacted and have kept the message intact for proper analysis.