I work at a different large tech company and there are absolutely internal ways to report any kind of suspicious contacts. I'd be shocked if every large company didn't have at least some way.