How to Get an "Are You Sure?" Prompt Before Sending an Email Outside Your Company
No major email app stops and asks before an email goes to someone outside your company. Gmail, Outlook and Apple Mail only let you take it back for a few seconds. What each one gives you, how to get a real confirmation at Send, and how to keep people from clicking through it.
The short answer
Most email apps send the moment you click Send. None of the big ones (Gmail, Outlook, Apple Mail) will stop and ask "this is going outside the company, are you sure?" on their own. What they offer is a few seconds to take the email back, and in some company setups, a notice that some recipients are external.
For a real confirmation, the kind that lists the outside addresses and waits for you, you need something extra. In Outlook companies that is usually an add-in like VIPRE SafeSend. Elsewhere it is a browser extension or a habit.
What your email app already gives you
| App | Built-in safety net | Does it stop and ask? |
|---|---|---|
| Gmail | Undo Send, up to 30 seconds. Workspace admins can add an "External" warning banner. | No |
| Outlook on the web and new Outlook | Undo send, up to 10 seconds. An admin can turn on the External Recipients MailTip. | No |
| Classic Outlook for Windows | A rule that delays every email by up to 2 hours. The same MailTip. | No |
| Apple Mail (Mac, iPhone, iPad) | Undo Send delay of 10, 20 or 30 seconds. | No |
Turn the undo window up, whatever you use
It costs nothing and catches the mistakes you notice straight away.
- Gmail: gear icon, See all settings, General tab, Undo Send, choose 30 seconds, Save Changes.
- Outlook on the web and new Outlook: Settings, Mail, Compose and reply, Undo send, slide it to 10 seconds.
- Classic Outlook: File, Manage Rules & Alerts, New Rule, Apply rule on messages I send, then defer delivery by a number of minutes. One or two minutes is enough.
- Apple Mail on Mac: Mail, Settings, Composing, Undo send delay, choose 30 seconds.
- Apple Mail on iPhone: Settings, Mail (under Apps on newer iOS), Undo Send Delay, choose 30 seconds.
Why undo is not enough
Undo only works if you notice the mistake in those few seconds, and it never tells you who the email is going to. Most wrong-recipient emails are noticed when the reply comes back, or never. A warning banner helps more, but it sits above the To line where it is easy to ignore, and Gmail's version skips anyone already in your contacts.
Getting a real confirmation at Send
A real confirmation does three things:
1. It stops the send until you answer.
2. It names the outside addresses, so you are confirming something specific, not just clicking OK.
3. It looks at the recipients when you click Send, not while you write, so a Cc added in the last second is caught.
There are two common ways to get it.
In an Outlook company: an add-in deployed by IT
VIPRE SafeSend is the best-known one. IT installs it for everyone, sets which domains count as internal, and from then on every email with an outside recipient opens a window where each outside address has to be ticked. We explain every feature in What is VIPRE SafeSend?, and the Outlook options in our Outlook external recipient warning guide.
For everyone else: a check in the browser
Presend is a Chrome extension that checks each email when you click Send. It runs in Gmail, Outlook on the web and other places you write in the browser, so one setup covers a team that uses both. It does not run inside desktop apps like classic Outlook or Apple Mail.
On the Presend dashboard, set the built-in External recipients check to Block. From then on, an email with an outside address stops with "Hold on", the outside addresses are listed, and you choose Send anyway or Review message. If you change the recipients after you confirmed, it asks again. A Gmail walkthrough is in Is there a SafeSend for Gmail?
Keep the prompt worth reading
A prompt on every outside email sounds safe. In practice, someone who sends forty client emails a day will learn to click through it by the end of the first week, and then it protects nobody. We wrote about this in why "Are you sure?" pop-ups stop working.
Ways to keep it useful:
- Block only where the risk is. Lawyers, accountants and anyone handling client files often want every outside email confirmed. A sales team usually does not.
- Use a softer level for the rest. In Presend, Warn shows the outside addresses next to the draft without stopping Send, and Note just lists them.
- Block on the combination, not the address. A rule like "Block any email to an outside address that mentions the merger" stops the email that matters and lets routine replies through.
- Keep the undo window on as well. It still works after you click Send anyway.
If you only use Gmail, our guide to making Gmail ask before sending walks through the same options step by step for Gmail.
Ready to try Presend?
Free to start. Nothing you write is stored. 30-second install.
Add to Chrome (free)