Should I report suspicious emails?

Posted by Aim_Fire_Ready@reddit | sysadmin | View on Reddit | 5 comments

Dear Abby, I just received a fake email supposedly from my webhost, but there were some clues that it wasn't legitimate and when I checked the headers, it lacked or failed SPF, DKIM, and DMARC. Whenever possible, I make a point to report suspicious emails, but the response varies wildly because the impersonated or actually compromised sender can be a friend, a family member, a coworker, an associate, a random stranger at a small company, big company, random office worker 5 states away, etc. etc. ad nauseum. Is this helpful? Do that many companies even have a process for handling reports of fake emails? I work alone in K12 IT, but if someone receives an email impersonating someone from our school, I certainly want to know about it, even though I don't have ANY time to spare for wild goose chases and the odds of any actual consequences for the offender are about even with airborne swine. Does it even make a difference? Sincerely, Discouraged in Detroit