Abuse Mailbox

One address to report fraud.
Instant AI triage.

Give your customers and team a single inbox to forward suspicious email. Every report is parsed, classified, and verified by AI in seconds — real phishing is confirmed and escalated, noise is filtered, and the reporter gets a clear verdict back. Your abuse inbox becomes a live detection feed instead of an unread folder.

01
Forwarded
Suspicious email lands at your alias
02
Triaged
AI classifies + extracts the threat
03
Resolved
Reporter gets a verdict; you get a threat

From forwarded email to confirmed threat

The mailbox doesn’t just store reports — it reasons about them. Each forwarded message is unpacked down to the original suspicious email, then checked the way an analyst would, only in seconds.

  • Unpacks the original message from inside the forward
  • Extracts URLs, attachments, and sender authentication (SPF / DKIM / DMARC)
  • AI classification: phishing, malware, spam, or benign — with a confidence score
  • Confirmed phishing and malware promote straight into your threat feed
  • Matches the report against the brands you already monitor
  • Deep analysis on high-severity reports explains the verdict in plain language
Live Determination
Frombilling@acme-secure-login.com
SubjectYour account is on hold
SPFFAIL
DKIMFAIL
URLs2 extracted
Verdict — Phishing
Spoofed billing notice impersonating your brand, with a credential-harvesting link on a 3-day-old lookalike domain. Promoted to your threat feed and escalated for takedown. Confidence 96%.

An abuse inbox that works for you

Your own branded alias
A dedicated report address for your customers and staff — reports route straight into your tenant.
Auto-acknowledgement
Every reporter gets an instant confirmation, then a determination once their report is triaged.
Unified inbox
Status workflow, classification filters, and search across every report — with full message drill-down.
Threat promotion
Confirmed phishing becomes a tracked threat automatically — correlated with the brands you monitor.
Noise control
Per-sender throttling and confidence scoring keep the inbox signal, not spam.
Intel rollup
See the campaigns, providers, and takedowns your customers’ reports are surfacing.

Live in three steps

Once your alias is provisioned, getting protected is as simple as forwarding mail. No software to install, no inbox migration.

  1. Get your alias. We provision a dedicated report address for your brand (for example, report@yourbrand) inside your tenant.
  2. Share it. Publish it where customers report fraud, and set staff to forward anything suspicious.
  3. Forward suspicious mail. Each report is acknowledged instantly; verdicts and escalations appear in your inbox — usually within minutes, determinations within a day.
Already a customer? Your alias and forwarding instructions live in the Abuse Mailbox module inside your dashboard.
Setup Checklist
Branded report alias provisioned
Forwarding instructions in-app
Instant auto-acknowledgement
AI triage on every report
Verdicts + threat promotion

Turn your abuse inbox into a detection feed.

Start with a free exposure scan, or talk to us about adding the Abuse Mailbox to your plan.