Labeling of external email to increase security

5 March 2024

Now emails sent to you from people outside the university will be marked as external in Outlook. This feature is turned on to make it easier for you to see emails that could be used for phishing/ransomware purposes.

Now emails sent from a domain other than umu.se will be marked "External" in Outlook. The function will be visible in Outlook shortly.

This is a security-enhancing measure that makes it easier for you to determine the authenticity of emails you receive. For example, if you receive an email claiming to be from a colleague at Umu but marked as "External", this may alert you that something may not be right. This extra layer of security will help protect users from falling victim to phishing attacks.

This is how you see the marking in Outlook

The marking appears in several places in Outlook.

In the inbox where your e-mail messages appear, you will see the marking next to the sender of the message:

You'll also see the mark at the top of the email when you've opened it:

It also appears in Outlook on mobile and in Outlook on the web.

What counts as internal and external email?

All email sent from an email domain other than umu.se is marked "External". Emails sent from external systems and services will therefore be marked as external, even if they are sent from someone at the university. Examples of this are messages that come from Canvas, Raindance and TimeEdit.

We cannot make exceptions for external services and systems as we cannot always guarantee that the e-mail addresses are unique to Umeå University.

What is phishing?

Phishing is a type of spam that tries to get the recipient to fill in personal information such as login details, bank details, etc. The email messages are often written in Swedish and appear to come from the university or from an acquaintance. The display name of the email and the email signature may look familiar which can make it difficult to determine whether the message is genuine or not. By introducing this marking, you can see whether the email comes from the university or from an external domain and can more easily determine the authenticity.

Login to be able to read and write comments.