How-to Report phishing to the URZ
Contents
How to report a phishing message
These instructions describe how you can report phishing messages to the URZ. In the linked instructions, we describe how you can recognize phishing and distinguish it from spam.
We collect the reported messages and inform the university in our operational reports if there is a corresponding threat situation. If possible, we contact the operator of the linked phishing sites and ask them to deactivate them.
Since we need the potential phishing emails in their entirety for further investigation, we ask that you forward the email to phishing@urz.uni-heidelberg.de as follows. If you are interested in an assessment of whether a particular email is phishing, please write this briefly as an additional comment in your message to us. Since it is very easy to create new sender addresses on the Internet, blocking individual senders is not effective. Please refrain from such requests.
Reporting in Outlook
- Select the email.
- Click the three dots located on the upper right of the email display.
- Click "Forward as attachment."
- In the window that subsequently opens, enter as the recipient and, if necessary, add your own comments.
- Send the email.

Reporting in Thunderbird
- Select the email and right click on the entry.
- In the menu, select "Forward and redirect."
- Select the option "As attachment."
- In the window that subsequently opens, enter as the recipient and, if necessary, add your own comments.
- Send the email.

Reporting in Apple Mail
- Select the email.
- Go to "Email" under "Menu."
- Select the option, "Forward as attachment."
- Enter the address as the recipient.
