As part of your VeritGuard plan, your firm's email is protected by an AI-powered anti-phishing tool that analyzes every incoming email for phishing, spoofing, and fraud. It adds a color-coded banner at the top of each email to tell you how safe it is at a glance. This article covers what the banners mean, how to handle them, and what to do if a legitimate email gets caught by the filter.

What Do the Email Banner Colors Mean?

I Received a Red or Yellow Banner — What Should I Do?

If You See a Red Banner

1. Read the details in the red banner — it will explain what was detected (e.g., spoofed sender, known phishing URL, malware attachment).
2. Click "Report This Email" inside the banner to flag it.
3. Delete the email or leave it in your inbox — our team regularly reviews reported emails.
4. If you already clicked a link or opened an attachment, stop what you are doing and call Verito Support immediately at (844) 629-9899.

If You See a Yellow Banner

1. Read the banner carefully — it will explain why the email was flagged (e.g., first-time sender, unusual request, external domain).
2. If you recognize the sender and the content looks normal, you can proceed. Yellow banners are often triggered by first-time contacts.
3. If the email asks you to click a link, download something, or send money/data — treat it with extra suspicion. Verify with the sender through a separate channel (e.g., call them directly) before taking any action.
4. If anything feels off, click "Report This Email" and contact Verito Support.

A Legitimate Email Was Sent to Quarantine — How Do I Retrieve It?

Occasionally, the email security filter may quarantine a legitimate email by mistake. This is called a false positive — the email is safe, but it was flagged as suspicious.

1. Do not try to retrieve it yourself. Verito regularly reviews quarantined emails on your behalf. If we find a false positive, we will release it to your inbox and reach out to you.
2. If you are expecting an email that hasn't arrived, contact Verito Support and let us know the sender's name, email address, and the approximate time it was sent. We will check the quarantine and release it if it is safe.
3. If this keeps happening with the same sender, let us know. We can adjust the filtering rules so emails from that sender are not flagged in the future.

How to Report a Suspicious Email

If you receive an email that looks suspicious — whether or not it has a warning banner — you can report it to help improve your firm's email protection.

1. Open the suspicious email (you can read it — just do not click any links or download attachments).
2. If there is a warning banner at the top, click the "Report This Email" link inside the banner.
3. If the email does not have a banner but still looks suspicious, forward it to Verito Support at itsupport@verito.com with a note explaining what concerned you.

Our team reviews reported emails regularly. If the email is confirmed as malicious, the filter will learn to block similar emails automatically in the future. If it was a false alarm, no harm done — reporting is always the right call when you are unsure.

Why Am I Getting Warning Banners on Emails from People I Know?

You may occasionally see a yellow caution banner on an email from someone you know — a client, a colleague, or a vendor you regularly communicate with. This can be confusing, but it is usually not a cause for concern. Here are the most common reasons:

1. First-time sender to your specific inbox. Even if your firm has communicated with this person before, the filter tracks sender history per mailbox. If this is the first time they emailed you specifically, it gets flagged.
2. The sender changed something. They may be emailing from a new email address, a different domain, or a new email platform. The filter notices the change and flags it for your awareness.
3. The email contains unusual elements. Links to file-sharing services, password-protected attachments, or urgent language ("wire transfer needed today") can trigger a caution banner even from known contacts.
4. The sender's email account may be compromised. This is exactly the kind of attack the tool is designed to catch. If a client's email was hacked, the attacker may send emails that look legitimate but contain malicious links.

Read the banner details carefully. If the email content looks normal and you were expecting it, you can proceed. If the email asks you to do something unusual — click a link, download a file, send payment information — verify with the sender directly by calling them before taking any action.