How-to Report phishing to the URZ
Contents
How to report a phishing message
These instructions describe how you can report phishing messages to the URZ. In the linked instructions, we describe how you can recognize phishing and distinguish it from spam.
We collect the reported messages and inform the university in our operational reports if there is a corresponding threat situation. If possible, we contact the operator of the linked phishing sites and ask them to deactivate them.
Since we need the potential phishing emails in their entirety for further investigation, we ask that you forward the email to phishing@urz.uni-heidelberg.deas follows. If you are interested in an assessment of whether a particular email is phishing, please write this briefly as an additional comment in your message to us. Since it is very easy to create new sender addresses on the Internet, blocking individual senders is not effective. Please refrain from such requests.
Reporting in Outlook
- Select the email.
- Click the three dots located on the upper right of the email display.
- Click "Forward as attachment."
- In the window that subsequently opens, enter as the recipient and, if necessary, add your own comments.
- Send the email.

If the option “Forward as attachment” is not available to you (for example, in Apple Outlook), you can also forward the email using “drag and drop”:
- Write a new email. Use your mouse to drag the email you want to send from the message bar into the new email. This will attach the forwarded email as a separate item to the new message.
Reporting in Thunderbird
- Select the email and right click on the entry.
- In the menu, select "Forward and redirect."
- Select the option "As attachment."
- In the window that subsequently opens, enter as the recipient and, if necessary, add your own comments.
- Send the email.

Reporting in Apple Mail
- Select the email.
- Go to "Email" under "Menu."
- Select the option, "Forward as attachment."
- Enter the address as the recipient.
