The Arsen reporting button allows employees to quickly and safely report suspicious emails, helping improve phishing detection across the organization.
1 – Objectives
Allow employees to easily report potentially fraudulent emails
Automatically send reports to Arsen when the email comes from a simulation
Forward real suspicious emails to a dedicated security mailbox
Strengthen the company’s overall security posture
2 – Prerequisites
Have a Google Workspace administrator account
Be able to access the Google Admin Console
Use Gmail as the company email service
3 – How the Phish Alert button works
Identify the behavior depending on the type of email
If the email comes from an Arsen simulation, the target is marked as Reported in the platform.
If the email does not come from Arsen, it is:
Automatically forwarded to a designated security address (e.g., SecOps)
Removed from the user’s inbox
4 – Install the Gmail Phish Alert Button Add-on
4.1 – Access the installation
Log in as a Google Workspace administrator and follow the steps below.
4.2 – Install the add-on
Open the Gmail Phish Alert Button Add-on page.
Click Admin Install.
Click Continue.
Select the desired organizational unit.
Review and accept the Terms of Service.
Click Finish.
Click Done to finalize installation.
5 – Use the Gmail reporting button
5.1 – Understand the effects of reporting
Emails from Arsen simulations are reported into Arsen and increase the employee’s security score by +20%.
Real phishing emails are reported to Google as malicious.
5.2 – Report an email from a computer
Open the email to report
Click the Phish Alert Button icon
Click
Report Phishing
5.3 – Report an email from the Gmail mobile app
Open the email to report
Scroll to Available add-ons
Tap
Phish Alert ButtonTap
Report Phishing
6 – Uninstall the Gmail reporting button
6.1 – Access the uninstall process
Log in to the Google Admin Console as an administrator
Click
Appsin the left panelClick
App listSelect
Gmail Phish Alert Button Add-on
6.2 – Remove the add-on
Click
Uninstall app
Confirm by clicking
Uninstall









