...

1. Change your password immediately by following this guide.
2. Enable 2-Step Verification for your Sage Google Account. The How-To article for this can be found here.
3. Follow the steps below from the If you've received a phishing/suspicious emailsection of this article.

...

Create a new service request

Open a service request with the Service Desk using this link: Report Phishing/Suspicious Email

Gather detailed email information

In a new tab

1. Open Gmail.
2. Open the email you suspect is a phishing attempt.
3. Next to Reply Image Removed, click More Image Removed Image Removed Show original.

...

Report a phishing email to Google

...

1. On a computer, go to Gmail. 
2. Open the message.
3. Next to Reply Image Removed, click More Image Removed.
   Note: If you're using classic Gmail, click the Down arrow Image Removed.
4. Click Report phishingSelect the email using the checkbox to the left of the message in question.
5. Click the Report Spam button along the top row of icons.

To unmark an email as phishing:

1. On a computer, go to Gmail. 
2. Open Select the email using the checkbox to the left of the message .
3. Next to Reply Image Removed, click More Image Removed.
   Note: If you're using classic Gmail,click the Down arrow Image Removed.
4. Click Report not phishingin question.
5. Click the Not Spam button along the top row of icons.

To do the same from the Gmail app on your phone:

1. Open the Gmail app.
2. Select the email by tapping the icon to the left of the message (usually represented by a profile picture or capital letter).
3. Click the three dots in the top right > Report Spam.

Avoid phishing attacks

Be careful anytime you get an email from a site asking for personal information. If you get this type of email:

1. Don’t click any links or provide personal information until you've confirmed the email is real. If you are unsure if the email is real open a service request with the Service Desk using this link: Report Phishing/Suspicious Email.
2. Do not NOT open or download any attachments until you have verified the email is legitimate.
3. If the sender has a Gmail address, report the Gmail abuse to Google.

...