---
title: Report Phish Email
description: Report phishing emails from the lists view.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/report-phish-email.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [List view in SIR Workspace, Explore, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Report Phish Email

Report phishing emails from the lists view.

## Before you begin

Role required: sn\_si.analyst

## Procedure

1.  Navigate to **Workspaces** > **Security Incident Response Workspace**.

2.  Click the list \(\[Omitted image "listview-icon.png"\] Alt text: list icon\) icon.

3.  Go to **User Reported Phishing Emails** > **All**.

    The user reported phishing emails list is displayed.

    \[Omitted image "phish-email-list.png"\] Alt text: Phishing email list

4.  Click **Report Phish Email** button.

    Report a phishing email by uploading it.

5.  Click **Add File** to add attachments.

6.  Click **Upload**.

    **Note:** Report a Phish Email by uploading the attachments. You can upload only one phishing email at once and should be in .eml format.

7.  Click **Submit**.

    The phishing email to log a security incident is created.


**Parent Topic:**[List view in SIR Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/setting-up-list-view-in-analyst-workspace.md)

**Related topics**  


[Personalize a list]()

[Apply quick filters on Security Incidents and Response Tasks lists]()

[Assign Security Incidents]()

[Close multiple security incidents]()

[Assign Response Tasks]()

[Working with quick filters]()

[Export Security Incidents or Response Tasks]()

[Manage Shift Handover records]()