Phishing Report

How it works

Select a phishing email in Apple Mail, trigger the Quick Action, and it's reported automatically. Each email is sent as its own report with the original .eml attached.

Reporting services

Each report is sent to all three services simultaneously.

Quick install

Setup takes about 5 minutes. You only need to do this once.

1. Open Automator Spotlight → "Automator" → New Document → Quick Action
2. Configure the workflow Set "Workflow receives" to no input in Mail.app
3. Add the script Search for "Run AppleScript", drag it in, paste the contents of report_phishing.applescript
4. Save Save as "Report Phishing"
5. Assign a shortcut System Settings → Keyboard → Keyboard Shortcuts → Services → assign e.g. ⌃⌥⌘P
6. Grant permissions Click "OK" when macOS prompts on first run. If missed: Privacy & Security → Automation

Tested and hardened

The script has been QA-tested against known Apple Mail AppleScript quirks.

• ✓ Async attachment bug — delay 2 before each send prevents Mail from sending empty reports
• ✓ IMAP guard — skips emails not fully downloaded, continues with the rest
• ✓ Error resilience — one bad email doesn't abort the entire batch
• ✓ File handle safety — nested try-blocks prevent leaked file handles on errors
• ✓ Temp cleanup — .eml files with sensitive content are deleted after sending
• ✓ Collision-free filenames — timestamps prevent overwrites on rapid re-runs