Protect yourself from email spoofing

Occasionally, you may receive emails that appear to be from The Texas Tribune but are not. This is known as email spoofing, where malicious actors disguise their emails to look like they’re from legitimate sources. These emails often try to trick you into clicking on harmful links or giving away sensitive information.

If you suspect you’ve received a spoofed email pretending to be from The Texas Tribune, here’s what you can do:

Steps to Take:

1. Do not click any links or respond. The email may contain harmful links or attachments. Avoid clicking on anything within the body of the email or engaging with the sender.
2. Mark the email as spam. Most email providers allow you to mark emails as spam. Doing this helps train your email client to recognize and filter out similar threats in the future. Note: If you are an Optimum or Suddenlink customer, view this page on how to report spam to their security team.
3. Forward the email to us. Please forward the suspicious email to our security team at: security+emailspoofing@texastribune.org

Sending Email Headers (Optional)

Sometimes we need additional details to investigate the email’s source. You can help by forwarding the email header information, which shows the email’s journey from sender to your inbox.

How to view email headers:

• Gmail: Open the email, click the three dots next to "Reply," then click "Show original."
• Outlook: Open the email, click the "File" tab, then click "Properties." You'll find the headers in the "Internet headers" section.
• Apple Mail: Open the email, click "View" in the top menu, then click "Message" and "Raw Source"

You can then copy and paste the headers into the body of a new email and send it to security+emailspoofing@texastribune.org

Stay Vigilant

• We will never ask for your password via email
• We always include The Texas Tribune branding in our emails and messages sent from staff will contain a company signature
• Check the sender's email "from:" address carefully, not just the display name
• If you see that the "from:" address is a Gmail email (e.g. name@gmail.com), you can report them via this portal