Phin Security

Mail Flow Rule: Financial Warning

The Mail Flow Rule: Financial Warning feature in Microsoft Automated Allowlisting adds a banner to emails containing specific financial keywords (like "bank account" or "payment information") to warn recipients not to click links or attachments unless the sender is recognized, and after consenting to the integration, users can create and validate this rule via the Exchange admin center, with troubleshooting and support available if needed.

Overview

This feature, part of the Microsoft Automated Allowlisting integration set, adds a banner to the top of all end-user emails containing certain keywords related to financial information.

After consenting to the Microsoft Automated Allowlisting integration, you will see two options:

  1. 1.Start Allowlist: This should have started automatically upon providing consent to connect the integration.
  2. 2.Create Mail Flow Rule: Found in the Financial Warning Mail Flow Rule section.

After clicking the "Create Mail Flow Rule" button, the process may take 1–3 minutes to provide feedback on whether the rule was successfully added.

If the process fails, running it again usually resolves the issue. If failures continue, contact the support team by submitting a support ticket.

Validating and Testing the Banner

Once the rule is successfully created, follow these steps to validate and test the new banner:

  1. 1.Log into https://admin.exchange.microsoft.com/#/
  2. 2.Navigate to Mail flow > Rules
  3. 3.Look for a rule named "Financial Warning Banner by Phin". The priority depends on previously configured rules.
  4. 4.Send an email to yourself or another email address within the associated Outlook tenant. The email should include one of the following keywords in the subject or body:
    • bank account
    • payment information
    • payment details
    • update payment
  5. 5.The recipient should see a banner stating:
    • [IMPORTANT WARNING] The following message appears to reference financial related information. DO NOT CLICK links or attachments unless you recognize the sender and know the content is safe.

Additional Information

Phin updates its Knowledge Base with new features with every release. You can read about the platform and its updates at: https://www.phinsec.io/knowledge.

Feedback is encouraged to help shape the product's future. For help or to submit ideas, use the support ticket system.