← Human Risk Under Pressure: Decisions That Protect You and Your Team
The Psychology of Trust and Pressure
How Attackers Exploit Your Brain's Shortcuts The Urgency Trap — When Speed Overrides Judgment Authority, Familiarity, and the Power of Context
Real-World Attack Scenarios
Email and Messaging Attacks — Spot the Fake Voice and SMS Attacks — The Human Side of Social Engineering Multi-Stage Attacks — When Trust Is Built Over Time
Decisions and Actions That Protect
Pause, Verify, Decide — Your Personal Process What to Do When You're Not Sure Reporting Without Fear — How Early Reporting Changes Outcomes
Decisions and Actions That Protect

Reporting Without Fear — How Early Reporting Changes Outcomes

Learn why reporting early is the most powerful action you can take, and how to do it effectively.

In this lesson, you will learn to:

  • Recognize why early reporting is important and describe what information to share when reporting a suspicious message or request.

Reporting Without Fear — How Early Reporting Changes Outcomes

This lesson addresses the hesitation people feel about reporting suspicious activity. You’ll learn why early reporting is critical, what information to share, and how reporting helps protect everyone.

Reporting Early Is the Most Powerful Action You Can Take

Many people hesitate to report suspicious messages because they’re afraid of being wrong or looking foolish. But here’s the truth: reporting early is the most powerful action you can take. It protects you, it protects others, and it gives security teams the information they need to stop attacks.

Why early reporting matters:

  • It helps protect others who might receive the same message
  • It gives security teams real-time information
  • It builds a culture of safety and shared responsibility
  • It saves time and resources compared to dealing with a breach

What to report:

  • The full message or email (including sender info)
  • What made you suspicious
  • Whether you clicked anything or replied
  • When you received it

Remember: You won’t get in trouble for reporting something that turns out to be legitimate. You will get in trouble — or your organization will — if you don’t report something that turns out to be an attack.

Why Reporting MattersA flow diagram: Suspicious Message, Report with details, Security Team takes action, Everyone stays protected.Why Reporting Matters!Suspicious MessageReport ItFull messageWhy suspiciousWhat you didSecurity TeamInvestigates and protects everyoneSYou HelpedEarly reporting saves time, money, and protects others
Why Reporting Matters — A visual showing the flow from suspicious message to report to protection: sender details, suspicious elements, action taken, timestamp.
What to ReportA checklist with four items: Full message with sender info, What made you suspicious, Whether you clicked anything, and When you received it.What to Report1Full messageInclude sender info, subject, and content2What made you suspiciousUrgency, unusual request, sender mismatch?3What you didDid you click, reply, or forward?4When you received itDate and time help with investigationReporting is the right thing to doWhen in doubt, report. You won't get in trouble.
What to Report — A checklist showing what information to include when reporting a suspicious message: sender, suspicious elements, what you did, and timestamp.
← Previous: What to Do When You're Not Sure