For most Real World supported Google Workspace customers using Gmail mailboxes, you can directly report spam or phishing messages that has arrived in your Inbox folder.
This can occur if mail protection services (such as Proofpoint Essentials or Google Workspace inbuilt protection, depending on your service setup) encounters a newly crafted malicious message type or where an exception has been applied for an address which is now compromised and is sending unsolicited mail.
Determine message legitimacy
When receiving any email message, double check if the message is legitimate - especially if you are about to perform an action against the message. For example, if an email has arrived from your manager that asks if you are free to help with a new customer - before replying or forwarding the message - double check that the email address is one that is typically used by your manager (work messages should use work email addresses) and contains signatures or disclaimers of your business brand (if set-up for your company).
Where you are unsure if the message came from the person they are claiming to be, check with the person that they have intended to send you the message. Do not reply to the message asking them. Instead, either call them or compose a new, separate email asking them if they had sent you a message with the subject and time that the unsure message was received.
This especially applies for messages that contain attachments that can run code in applications, such as PDF documents, Word or Excel documents with macros, or webpage files. Also be wary of messages that is sharing links to open a document. If you are signed into OneDrive, SharePoint or Google Docs when clicking on such a link, your web browsers current sign-in credentials for such services could be disclosed to the destination.
Report Message options
Where the above proves that the message is not legitimate, while viewing the message in Gmail, click the Message options at the top right of the email and choose the type of malicious message it is, either Report spam or Report phishing.
A Report popup will appear to confirm your selection and report it to Google. Click a button the appropriately submits the message.
Multiple spam or phishing messages in many mailboxes
Where you find many malicious or unwanted messages are beginning to appear, not only to your own mailbox but other user mailboxes as well, please submit a ticket for Real World Technology Solutions to investigate.
You can submit a ticket using at this address https://helpdesk.realworld.net.au/hc/en-us/requests/new or by sending an email to email@example.com.
Include as much information about the malicious message, such as how many messages you have received and a list of other users that have received the message.
If you are submitting a ticket by emailing us, add the malicious messages as an attachment. To do this, select the messages using checkboxes in Gmail, then click on More, then Forward as attachment.
A new email message with the malicious emails attached will be created. Do not forward or reply to the malicious message and include other recipients.