Fraud shield and data protection rules

Fraud shield

The Fraud shield tab checks every new message for look-alike domains, people pretending to be colleagues, replies that go elsewhere, failed authentication and changed bank details. Suspicious mail gets a warning banner in Mail. It never deletes or blocks mail itself.

Do it: tune it

1. Open Fraud shield.
2. Under Sensitivity, keep Normal for the first weeks. It learns who you deal with.
3. Switch on Notify administrators about dangerous messages.
4. Under Extra names to protect, add your CEO, finance lead and anyone else a fraudster might pretend to be, one per line, then Save names.
5. Check Allowed and blocked senders occasionally.

People work flagged mail on the Shield page. Bank-detail changes create Payment checks: two different people must confirm using a number already on file, never one from the email.

Data protection rules

In Compliance, DLP watches outgoing mail and sharing for sensitive data. Rules look for payment cards, IBANs, keys and passwords, national IDs, keywords or a custom pattern. Choose an action: Notify admins only, Warn the sender, Require a reason or Block. Creating rules is part of the Business plan.

Do it: make a rule

1. DLP, New rule, name it "Card numbers".
2. Pick Payment cards and the action Warn the sender.
3. Apply it to Outgoing mail, and switch on Only when leaving the workspace.
4. Use Test: paste a sample card number to see it caught, with nothing sent.
5. Save rule. It is active within about a minute.
6. Later, review Incidents. They show who, where and what happened, with only a masked sample.

More: Fraud shield and Data protection rules.

Recap

• The shield warns, it does not block.
• Start DLP with notify or warn, then tighten.
• Always test a rule first.