Phish samples submitted to Report Phish may be used for a number of purposes, including technical research and legal action. The information you submit is considered to be in the public domain, and may be shared with others, including other researchers and law enforcement.

While Report Phish will go to reasonable lengths to protect any personal identifying information about you that may be contained in the information you submit, Report Phish cannot guarantee these efforts will be successful, and you should not rely on Report Phish to protect your information.

For example, your email address may be included in the hyperlinks that are embedded in the phish sample, either as plain or encrypted text, and may be disclosed to the phisher if the unaltered link is followed.

Report Phish cannot be held responsible for its failure or inability to protect you or your information. By reporting phish to us, you agree to accept this risk in the fight against phish spam.