FAQ »

DCS Email Banner FAQ | Understanding Your Email Security Notices


About the Email Security Banner

As part of DCS Managed Email Security, some messages display a color-coded banner near the top of the email. This banner summarizes what our filters observed and guides safe next steps.

Why am I seeing these banners?

Your organization is protected by DCS’s email security. The banner provides context such as the true sender address, whether a message is internal or external, and any unusual characteristics found during analysis.

What do the different banner colors mean?

  • Gray: No issues detected. Still verify the sender and context before acting.
  • Yellow: Something about the message is unusual and deserves extra scrutiny (for example, first-time sender, sensitive information request, or out-of-pattern content).
  • Red: The message appears suspicious or malicious (for example, brand impersonation, spoofed sender, known-bad link, or other indicators of Phishing). Treat as unsafe.

What should I do with a yellow (caution) banner?

  • Confirm the sender is who they claim to be.
  • Avoid clicking links or opening attachments until you’re confident it’s legitimate.
  • If sensitive data is requested, validate by phone or another trusted method first.

What should I do with a red (danger) banner?

  • Do not click links or open attachments.
  • When in doubt, delete the message or use the “Report This Email” link in the banner to notify DCS.
  • If you interacted with the email, contact your IT/security lead immediately.

If it’s dangerous, why did it reach my mailbox?

Some messages contain a mix of legitimate elements (e.g., valid infrastructure) and risky indicators. In those cases, the system may allow delivery with a red banner so you can see details and take the recommended action. Dangerous items may also be quarantined depending on your company policy.

The “Report This Email” link sends the message to DCS for review and training. You can mark it as Safe, Spam, or Phishing, and optionally add a note. Your feedback helps improve detection quality for everyone in your organization.

Why do I see a protection page when I click a link?

As an added safeguard, link clicks can be checked in real time. If a URL is risky or unknown, you may be routed to a protection page that explains what was found and recommends next steps before continuing.

What information is collected?

To operate the service and investigate threats, the system may collect message metadata, banner selections, user feedback (e.g., “Report This Email”), and technical indicators from links and attachments. This information is used to protect your organization and improve detection quality. For more details, refer to your company’s agreement with DCS and our privacy practices.

Does it work on mobile?

Yes. Banners and protection pages are designed to be readable and actionable across desktop, webmail, and mobile clients.

When should I contact support?

  • You believe a malicious email wasn’t flagged properly.
  • You submitted feedback and need follow-up.
  • You clicked a suspicious link or opened an attachment and need assistance.

For urgent issues, follow your organization’s normal escalation path.

Examples of DCS gray, yellow, and red email security banners with guidance
Sample banner styles shown for illustration. Your company’s wording or options may vary.

About DCS Managed Email Security

DCS provides advanced inbound email analysis, brand-impersonation protection, real-time link checks, and user-friendly banners that educate while keeping mail flowing. Configuration, quarantine, and reporting are tailored to your organization’s policies.