How do I avoid and report phishing emails?

Background

Phishing emails impersonate a trustworthy sender to trick you into sharing login credentials or other personal information. You can't stop phishing emails from arriving, but recognizing common tactics lowers your risk of being tricked by one.

Answer

Evaluate any email that asks for personal information or urges you to click a link before you act on it:

  • Confirm the sender's display name matches the actual email address.

  • Watch for urgent or threatening language in the subject line.

  • Check whether the salutation addresses you by name, not a generic greeting.

  • Look for spelling and grammar errors in the body.

  • Hover over links to preview the destination before clicking — don't click first.

  • Don't open unexpected attachments.

  • Don't enter personal information on a page you reached through an email link.

  • Check the signature for missing or inconsistent sender details.
 Warning
Be careful any time you receive an email from someone or from a site asking for personal information. If you get this type of email, do not click on any links or provide personal information until you've confirmed the email originated from a trustworthy and legitimate source.
 Important
If you receive a suspicious email that looks to be from Procore, do not reply to the email. Instead, send the email to: security@procore.com
 Best Practice

Think you've been tricked by a phishing attempt? If you entered your Procore username or password into a suspicious link or email, someone else may be able to sign in to your account.

  1. If you can still sign in, reset your password immediately.

  2. Send an email to security@procore.com to ask Procore to check your account for suspicious activity.

See Also