Before reporting a suspicious email, please check to see if we've already posted an announcement about it on the IT Security Alerts page. If so, then you may simply delete the email.
To report a new phishing or spam email, a virus, malware, or an infected computer, send the email as an attachment to phishing [at] mcgill.ca.
See other types of information security incidents that must be reported: IT Security Incident Examples. These incidents should be reported directly to McGill infosec [at] mcgill.ca (Information Security).