# Set up Gmail to Forward Phishing Emails to Radiant Security

In this guide, you will configure Gmail to automatically forward suspected phishing emails to Radiant Security.

The following guide has 3 options you can choose from, depending on how your phishing reporting mailbox is set up. Choose the method that best matches your environment:

* If you currently use a [Google Workspace group](#add-radiant-security-alias-to-a-google-workspace-group) to receive phishing reports.
* If you currently use a [dedicated phishing inbox](#add-a-forwarding-rule-to-the-phishing-email-account) to receive phishing reports.
* If you either have the [group-based or full-account based](#add-a-default-route-with-an-additional-recipient) method of receiving phishing reports.

### Add the Radiant Security alerts alias to a Google Workspace group

If you use *a phishing group* to process phishing emails, the Radiant Security alerts alias can be added to this group in order to receive a copy of the user report. To do this:

1. Open the [Google Workspace admin portal](https://admin.google.com/).
2. Click **Directory**, then **Groups**.
3. Find the phishing group in the list.
4. Click **Add members**.
5. Add the Radiant Security alias: `alerts@app.radiantsecurity.ai` to the group.

### Add a forwarding rule to the phishing email account

Use this method if you have *a dedicated Google Workspace phishing account* with its own inbox.&#x20;

{% hint style="info" %}
**Note:** This method requires you to have access to the phishing account inbox and settings.
{% endhint %}

1. Sign in to the phishing account and open the Gmail inbox.
2. Click the settings icon, then click **See all settings**.
3. Select **Forwarding and POP/IMAP**.
4. Use the **Add a forwarding address** to add the Radiant Security alias: `alerts@app.radiantsecurity.ai`.&#x20;
5. Set up **Forward a copy of incoming mail to send a copy** to the added email address and click **Save**.

{% hint style="info" %}
**Note:** If you are already forwarding a copy to another destination, you may have to add this second destination as a mail rule instead.
{% endhint %}

### Add a default route with an additional recipient

This method should work for *both groups and dedicated phishing users*. It works by adding a Gmail default route that then adds the Radiant Security reporting email as an additional recipient of the emails sent to the phishing alias.

1. Open the [Google Workspace admin portal](https://admin.google.com/).
2. Navigate to **Apps > Google Workspace > Gmail**.
3. Open the **Default** routing page.
4. Click **Add another rule**.
5. In the **Specify envelope recipients to match section**, enter the **Email address** of your phishing inbox.

<div align="left"><figure><img src="https://2439665791-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FPsFulb2ZOtSPcRSc2rXE%2Fuploads%2FP8D7AAfAWs5obyiKsrTY%2Fimage.png?alt=media&#x26;token=02aaa20f-79fd-4fd0-b256-ca9695679ca2" alt="" width="471"><figcaption></figcaption></figure></div>

6. In the **If the envelope recipient matches the above, do the following** section, select the **Also deliver to >** **Add more recipients** checkbox.

<div align="left"><figure><img src="https://2439665791-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FPsFulb2ZOtSPcRSc2rXE%2Fuploads%2Fq5VwrsLmxtfZZ5koC5qX%2Fimage.png?alt=media&#x26;token=3ec8d84e-9220-4026-b62a-2427e4202c5b" alt="" width="439"><figcaption></figcaption></figure></div>

7. In the **Envelope recipient** section, click **Replace recipient** and enter the Radiant Security email: `alerts@app.radiantsecurity.ai`.

{% hint style="warning" %}
**Important note:** It is important to unselect the **Do not deliver spam to this recipient** option, as it may prevent phishing emails from being properly forwarded.
{% endhint %}

<div align="left"><figure><img src="https://2439665791-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FPsFulb2ZOtSPcRSc2rXE%2Fuploads%2FchyDthnpSCpcxWMJ9soE%2FSet_up_Gmail%20_to_Forward_Phishing_Emails_to_Radiant%20Security_03.png?alt=media&#x26;token=6d10b829-d39a-4fee-924a-872c71ca87af" alt="" width="353"><figcaption></figcaption></figure></div>

8. Under **Options**, select **Perform this action on non-recognized and recognized addresses**.

<div align="left"><figure><img src="https://2439665791-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FPsFulb2ZOtSPcRSc2rXE%2Fuploads%2FBU4UYc7EhdUxmJc7fa2I%2FSet_up_Gmail%20_to_Forward_Phishing_Emails_to_Radiant%20Security_04.png?alt=media&#x26;token=bec0ac7a-a9cd-4b3f-9f74-94aa8d05ecf5" alt="" width="461"><figcaption></figcaption></figure></div>

9. Click **Save**.
