Email Security System

Email Security System

Email presents a significant cybersecurity risk, exposing the University to a range of threats, including fraud, identity theft, and data breaches. To combat this risk, the University has engaged an email security platform to manage email threats and improve the internet safety of staff and students.
  • Step 1: If it looks risky → click Report Phishing (Outlook)

  • Step 2: If it’s just unwanted marketing → click Report Junk

  • Step 3: Wait for the reply from AI Analyst - emailreport@scu.edu.au and follow it (reply if unsure)

Checking and Reporting Suspicious Email

To help keep your inbox clean and our accounts secure, Technology Services (TS) has streamlined how we handle suspicious emails.

The 'Report Message' button is now the primary way to handle phishing and spam.

  • Outlook Web: open email → top-right / ... menu

  • Outlook Desktop: Home ribbon → Report Message

  • Outlook Mobile: open email → ...Report Message

34896199-1fe4-4825-b362-7c1e232f08e9.jpg
Outlook Desktop
3ce0a6d5-883b-4426-88b7-f4e99242244d.png
Outlook Web
report button_outlook mobile 3dots.jpg
report button_outlook mobile.png
Outlook Mobile

 

Instead of lodging a Service Desk ticket, please use the Report Message (or Report Phishing) button directly in Outlook.

Using the button is a much more effective way to get help because:

  • You get an instant answer: Our AI Security Analyst will review the email immediately and send you a reply with the results.

  • It’s a conversation: If you aren't sure why an email was flagged, you can simply reply to the AI’s email to ask for more details.

  • It protects the entire university: When you report an email via the button, the system can automatically identify and remove that threat from every other inbox at SCU.

  • No extra admin: Because the button handles the full analysis and remediation, there is no need to create a separate Service Desk ticket.


AI Security Analyst Email

After clicking on the Report Phishing button, you’ll soon receive an email from the AI Analyst (emailreport@scu.edu.au) explaining what it found.

Example AI Analyst.png

What if I don’t understand or would like more information about the AI Security Analyst email?

  • If you’re unsure about the results you received from the AI Security Analyst, you can simply reply directly to the analysis email. The AI agent is interactive and can provide further details on why a specific email was flagged or cleared.

  • If you’d like, you can ask it questions such as “Why was this email flagged?” or “Is it safe to open the attachment?” and it will respond accordingly.


Promotions Folder

A cleaner inbox with the ‘Promotions’ folder

To give you a cleaner, more manageable inbox, we’ve introduced a new Promotions folder in your mailbox.

What is it? Our system now automatically identifies "greymail" which includes legitimate newsletters, automated notifications, and marketing emails and moves them out of your main inbox into this dedicated folder. This keeps your primary view clear of non-urgent distractions.

How does it work? The system is designed to learn from you. The system is designed to learn from you. It gets smarter based on how you use it:

  • To keep an email in your main Inbox: If you find a newsletter in the Promotions folder that you’d prefer to see in your main inbox, simply move it back. The system will remember this preference for future emails from that sender.

  • To move something to Promotions: If an unwanted advertisement hits your main inbox, move it to the Promotions folder manually. The system will learn to filter similar emails there next time.

  • Check it occasionally: We recommend checking your Promotions folder once a day, as you might your Junk folder, to ensure nothing important has been filtered.

Frequently Asked Questions (FAQs)

We’ve recently introduced a Promotions folder to help keep your main inbox free from non-urgent newsletters and notifications. If you’re missing an expected email, please check that folder first.
If you find the email is in the wrong place, here’s how to train the system:

  • Wrong folder: Move the email back to your main Inbox. The system will learn your preference and route future emails from that sender to your Inbox.

  • Daily habit: We recommend checking your Promotions folder once a day to make sure you haven’t missed anything you consider high-priority. If emails from a specific sender keep landing in the Promotions folder incorrectly, moving them once or twice is usually enough to correct this.

💡 Tip: For quick access Add Promotions to your Favourites: Use Favorites in Outlook - Microsoft Support

In Outlook, Report Phishing and Report Junk serve different purposes, even though both are used to deal with unwanted or suspicious emails. The key difference is intent and urgency.

  • Report Phishing

    • Use for emails that are dangerous or deceptive

    • Examples: fake Microsoft/bank emails, suspicious links or attachments

    • Alerts IT/security and helps stop attacks

    • For security threats

  • Report Junk

    • Use for unwanted but harmless emails

    • Examples: spam, marketing, newsletters

    • Trains Outlook’s spam filter

    • For annoying emails, not scams

  • Quick rule

    • Looks fake or risky? → Report Phishing

    • Just spam? → Report Junk

Promotions

  • Legitimate, expected emails

  • Examples: newsletters, sales, updates you subscribed to

  • Not dangerous, just non‑urgent

  • Inbox filtering for organising email

Junk

  • Unwanted or suspicious emails

  • Examples: spam, scams, unknown senders

  • Considered low trust or risky

  • Email filtering for protection

Quick rule

  • You might want it later → Promotions

  • You don’t want it at all → Junk

  • Yes, this will form part of the “training” of the system

  • By default, no. The Promotions folder is part of our university-wide Graymail filtering system, which helps reduce clutter and ensure your Inbox stays focused on what matters. We recommend keeping the folder in place and training it to reflect your personal preferences over time.

  • You clicked a suspicious link or entered your password

  • The Report Message button is missing

  • A legitimate email appears to have been removed/quarantined and you can’t recover it

  • You received an AI Analyst result you don’t trust even after replying for clarification

We have completely retired the daily Mimecast digest. Instead of holding emails in a separate portal that you have to check, the new system simply routes spam and borderline spam directly to your regular Junk folder in Outlook.

This is normal and means the security system is working! The AI continuously scans for threats. If a new threat is identified moments after an email is delivered, the system will automatically pull the dangerous email from your inbox to protect your device and your data.

Simply drag the email from Junk or Promotions back into your main Inbox. Our new system uses artificial intelligence to learn your preferences. Moving the email is the fastest way to teach the system to recognise that sender as safe for you in the future.

Greymail is the term for emails that sit somewhere between important mail and outright spam. Think of things like promotional offers, store newsletters, and marketing blasts. You usually opted into them at some point, so they aren't malicious, but they can quickly clog up your day-to-day inbox.