SaviorLabs MailGuard

You clicked an email warning banner.

This page explains why the warning appeared, what it means, and what to check before clicking links, opening attachments, replying, or approving anything.

A warning does not automatically mean the email is malicious. It means the message deserves extra review.

What should I check? I need help

SaviorLabs MailGuard · Managed by SaviorLabs · Powered by INKY

Example warning banner

The message banner is shown inside the email so you can make a better decision at the moment of risk.

What the banner means

The email has one or more details that deserve attention.

MailGuard looks for message characteristics commonly associated with phishing, impersonation, suspicious links, sensitive content, malware, and fraud attempts.

!

Caution

The message may contain behavior or content that should be reviewed before you interact with it.

@

External sender

The sender is outside your organization. That may be normal, but it should be checked.

S

Sensitive content

The message may involve passwords, payments, confidential information, or other higher-risk requests.

What to do next

Slow down before you act.

Do not click, reply, open attachments, scan QR codes, approve payments, or provide information until you have reviewed the message.

1

Confirm the sender.Check the actual email address, not just the display name.

2

Ask whether you expected it.Unexpected invoices, file shares, login alerts, and payment requests need extra scrutiny.

3

Be careful with links and attachments.Hover over links where possible. Do not open unexpected attachments or scan unknown QR codes.

4

Verify sensitive requests separately.Use a known phone number or separate trusted communication method, especially for money or credentials.

Higher-risk requests

Be especially careful with these messages.

These are common patterns in phishing and business email compromise attacks.

Sign-in requestsMicrosoft 365, Google, SharePoint, DocuSign, Adobe, Dropbox, or similar login pages.
Payment changesVendor banking changes, wire requests, ACH changes, invoice changes, or urgent payment instructions.
Confidential informationPayroll, tax, banking, customer, employee, legal, or internal business information.
Pressure tacticsUrgent action, secrecy, bypassing normal procedures, gift cards, or executive impersonation.

When in doubt

Stop and ask before taking action.

If you are unsure whether the message is safe, do not forward it around the company and do not interact with the message. Report it or contact your internal IT contact.

Email SaviorLabs Support Report Incorrect Warning

Safe handling

  • Use your company's Report Phishing button if one exists.
  • Verify payment and credential requests through a separate trusted method.
  • Contact IT or SaviorLabs before acting on anything suspicious.

Common questions

About SaviorLabs MailGuard warnings

Does the warning mean the email is dangerous?

No. It means the message deserves extra review. Some legitimate emails can trigger warnings.

What does "External" mean?

It means the message came from outside your organization. External email is normal, but it should be reviewed carefully when the message asks you to click, open, approve, or provide information.

What does "Sensitive Content" mean?

The email may include wording or requests related to higher-risk topics, such as payments, passwords, personal information, confidential documents, or account access.

What if I know the sender?

Still review the message. Attackers can impersonate known contacts, and legitimate accounts can be compromised.

Still unsure?

Do not click, reply, download, scan, or approve. Report the message or ask for help.

SaviorLabs MailGuard · Managed by SaviorLabs · Powered by INKY

Report Suspicious Email

Report Incorrect Warning

Please fill out the form below to report a warning that appeared incorrectly.

  • This field is for validation purposes and should be left unchanged.

If this is urgent, please call our support line at 978-223-2959.