Abnormal AI: Identifying and Reporting Suspicious Emails

When Abnormal AI identifies a potentially suspicious email in Exchange/Outlook, the message may be delivered to the Junk folder with the subject line [Suspicious Email Detected] and a warning banner at the top of the message.

The warning banner may display one or more of the following indicators:

• Unusual Sender
• Unusual Geolocation
• Email Authentication

These indicators identify characteristics that may make an email suspicious. They do not necessarily mean the message is malicious.

Exchange/Outlook Users

Report a Suspicious Email

If you receive an email marked as suspicious or do not recognize the sender:

1. Open Outlook.
2. Select the Junk Email folder.
3. Locate the suspicious email.
4. Review the sender's email address and message details.
5. Do not click links, open attachments, or reply to the message.
6. Select Report Suspicious to report the email.

Mark a Legitimate Email as Not Junk

If you recognize the sender and have verified that the email is legitimate:

1. Open Outlook.
2. Select the Junk Email folder.
3. Locate the legitimate email.
4. Right-click the message.
5. Select Report.
6. Select Not Junk.

This helps prevent similar legitimate messages from being delivered to the Junk Email folder in the future.

Apple Mail Users (Mac)

Apple Mail displays the mailboxes associated with your connected TWU email account. For Exchange/Outlook accounts, you may see the Junk or Junk Email mailbox.

Review a Suspicious Email

1. Open the Mail application.
2. Select the Junk or Junk Email mailbox.
3. Locate the suspicious email.
4. Review the sender's email address and message details.
5. Do not click links, open attachments, or reply to the message if it appears suspicious.

Report a Suspicious Email

If you use Apple Mail, the Outlook Report Suspicious option may not be available in the Mail application. Access your TWU email through Outlook on the web or Outlook for Mac and use the Report Suspicious option when available.

Move a Legitimate Email to the Inbox

If you recognize the sender and have verified that the email is legitimate:

1. Open the Junk or Junk Email mailbox.
2. Select the message.
3. Use the Move to option or drag the message to your Inbox.

Moving a message to the Inbox does not necessarily submit a security report. Use the reporting option in Outlook to report suspicious messages.

Gmail Users

Gmail users will not see the specific Abnormal AI warning banner or [Suspicious Email Detected] subject line described above. Gmail continues to display its own warning messages on emails delivered to the Spam folder.

Report a Suspicious Email

1. Open Gmail.
2. Select the Spam folder.
3. Locate and open the suspicious email.
4. Select Report phishing if you believe the message is attempting to obtain passwords, financial information, or other sensitive information.
5. Follow any additional prompts.

Mark a Legitimate Email as Not Spam

If you recognize the sender and have verified that the email is legitimate:

1. Open Gmail.
2. Select the Spam folder.
3. Locate the legitimate email.
4. Select Report not spam.

The message will be moved to your Inbox.

Email Security Reminders

Regardless of which email application you use:

• Review the sender's full email address, not just the display name.
• Do not click unexpected links or open unexpected attachments.
• Be cautious of messages requesting money, passwords, financial information, or other sensitive information.
• Verify unexpected requests through a separate, trusted communication method.
• Report suspicious messages using the appropriate reporting option for your email application.

Important: An email warning does not automatically mean a message is malicious. However, always review the message carefully before interacting with it.

Need Assistance

For additional support, contact the Technology Service Desk at 940-898-3971, servicedesk@twu.edu, or submit a request through the Technology Service Center.