Skip to main content

Install the Arsen Phish Report Button for Gmail

Install and use the Gmail Phish Report Button add‑on

Updated over a month ago

The Arsen reporting button allows employees to quickly and safely report suspicious emails, helping improve phishing detection across the organization.


1 – Objectives

  • Allow employees to easily report potentially fraudulent emails

  • Automatically send reports to Arsen when the email comes from a simulation

  • Forward real suspicious emails to a dedicated security mailbox

  • Strengthen the company’s overall security posture


2 – Prerequisites

  • Have a Google Workspace administrator account

  • Be able to access the Google Admin Console

  • Use Gmail as the company email service


3 – How the Phish Alert button works

Identify the behavior depending on the type of email

  • If the email comes from an Arsen simulation, the target is marked as Reported in the platform.

  • If the email does not come from Arsen, it is:

    • Automatically forwarded to a designated security address (e.g., SecOps)

    • Removed from the user’s inbox


4 – Install the Gmail Phish Alert Button Add-on

4.1 – Access the installation

Log in as a Google Workspace administrator and follow the steps below.

4.2 – Install the add-on

Open the Gmail Phish Alert Button Add-on page.

Google Workspace Marketplace page for the Arsen “Phish Report Button” add-on, showing admin install options and an overview of the extension in Gmail.

Click Admin Install.

Confirmation window for admin installation of the Phish Report Button showing required access permissions.

Click Continue.

Select the desired organizational unit.

Google Workspace Admin Console showing the Phish Report Button as an installed application for the domain.

Review and accept the Terms of Service.

Click Finish.

Google permissions consent screen showing Gmail access, email sending, and connection to external services for the add-on.

Click Done to finalize installation.

Success message confirming installation of the Phish Report Button in Google Workspace and its availability in Gmail’s sidebar.


5 – Use the Gmail reporting button

5.1 – Understand the effects of reporting

  • Emails from Arsen simulations are reported into Arsen and increase the employee’s security score by +20%.

  • Real phishing emails are reported to Google as malicious.

5.2 – Report an email from a computer

  • Open the email to report

  • Click the Phish Alert Button icon

  • Click Report Phishing

Gmail interface showing a suspicious email with the Arsen Phishing Report Button visible in the sidebar.

5.3 – Report an email from the Gmail mobile app

  • Open the email to report

  • Scroll to Available add-ons

  • Tap Phish Alert Button

  • Tap Report Phishing

Gmail Mobile interface displaying the Phish Report Button add-on with phishing identification tips and a reporting button.


6 – Uninstall the Gmail reporting button

6.1 – Access the uninstall process

  • Log in to the Google Admin Console as an administrator

  • Click Apps in the left panel

  • Click App list

  • Select Gmail Phish Alert Button Add-on

6.2 – Remove the add-on

  • Click Uninstall app

Google Admin Console settings page for the Phish Report Button app, showing OAuth access and user access options.

  • Confirm by clicking Uninstall

Confirmation pop-up to uninstall the Phish Report Button from Google Workspace.

Did this answer your question?