Defines who receives phishing alerts reported by employees.
Lets you choose whether, besides saving and reporting, an educational message is sent when the reported email was a simulation.
Lets you customize the text employees see when using the report button (title, subtitle, question, and confirmation messages).
Lets you automatically delete the reported email from the employee's inbox, with a customizable confirmation message.
Adapts the report button's tone and content to each organization's internal communication.
Navigation: Settings → General → Report Button
Go to Settings → General and select the Report Button tab.
Under Incident Reporting Email, add the addresses that should receive your organization's phishing reports. You can add more than one.
Turn on Save reported emails on SIEM inbox if you also want reported emails to be saved in Whalemate's SIEM inbox.
Under Behavior on report, choose what happens when an employee reports an email:
Save and report: only logs and notifies the report.
Save, report and send educational message: also shows an educational message when the reported email is a Whalemate simulation.
Under Report panel, customize the title, subtitle, and question employees see when they open the report button.
Under Confirmation — real email, edit the title and message employees see when they report an email that is not a simulation. This is the default message shown for any reported email.
Under Confirmation — simulation, edit the title and educational message employees see when they report a phishing simulation. This message only shows if you selected "Save, report and send educational message" in step 3; otherwise, the real-email confirmation is used.
Under Delete on report, turn on Delete email after report if you want the email automatically removed from the employee's inbox once reported, and customize the deletion confirmation message.
Click Save to apply the changes.
Changes apply immediately to all employees in the organization.
What's the difference between "Save and report" and "Save, report and send educational message"?
The first option only logs the report. The second also shows employees an educational message when what they reported was a phishing simulation.
What message does the employee see when reporting a simulation?
If you selected "Save, report and send educational message," they'll see the message under "Confirmation — simulation." Otherwise, they'll see the same message shown for any real email.
Can I customize all the report button's text?
Yes. The panel's title, subtitle, and question, and both confirmation titles and messages, are editable.
What happens if I turn on "Delete email after report"?
The reported email is automatically deleted from the employee's inbox, and they see the deletion message you configured.
Who receives phishing reports?
The addresses added under "Incident Reporting Email." If you also turn on "Save reported emails on SIEM inbox," reported emails are also saved in Whalemate's SIEM inbox.
Have feedback or want to request improvements? Let us know at roadmap.whalemate.com/roadmap
