7 Signs to Check Before You Send a Risky Email

There is a half second between finishing an email and sending it. Most of the time you fill it with nothing. Once in a while, that half second is the only thing standing between you and a message you wish you could pull back. Here are seven signs worth checking in that moment, before you hit send.

🔬 More than two thirds of data breaches involve a human element, such as an error or misuse, rather than a purely technical attack.

Source: Verizon Data Breach Investigations Report, 2024.

1. You are promising or guaranteeing an outcome

Words like “guarantee”, “this will definitely”, or “you will see” turn a hopeful statement into a commitment someone can hold you to. In regulated industries, a guaranteed result in writing can cross a legal line on its own. If you are not certain you can deliver it, soften it before it leaves.

2. There is a recipient you did not consciously add

Scan the To, Cc, and Bcc fields. If a name is there because of autocomplete or a long reply-all chain rather than a decision you made, stop. One unintended recipient is the most common way confidential information ends up where it should not. A recipient-aware check can flag this for you automatically.

3. The thread below your reply contains something sensitive

Your reply might be harmless. The forty lines of history underneath it might not be. Before you forward, read down the thread and ask whether everyone now on the message is meant to see all of it.

4. You are writing while angry or defensive

Tone is not just etiquette. A sharp message to a colleague can become an HR matter, and a defensive line to a client can become evidence of intent. This is a check on your own writing, not on anyone else’s. If the message reads as heated, give it ten minutes and a second look.

5. You are making a claim about a competitor

Statements about a rival’s product, finances, or conduct carry real risk if they are not provably true. What feels like a confident sales line in the moment can read as disparagement later. Stick to what you can support about your own offering.

6. You are sharing numbers, files, or terms you are not sure are public

Pricing, roadmaps, contract terms, and internal figures all feel ordinary to share until they reach the wrong inbox. If you are not certain a detail is already public or covered by an agreement, treat it as if it is not.

7. The message would read badly if it were screenshotted

This is the simplest test of all. Imagine the message on a screen in a meeting you are not in, or attached to a request for records. If that thought makes you wince, rewrite it now, while it is still only a draft.

From a checklist to a reflex

Seven checks are easy to agree with and hard to remember at four in the afternoon on a busy day. The point is not to run a formal review on every email. It is to build the instinct to pause on the ones that match a pattern: a promise you cannot keep, an unexpected recipient, a heated tone, a claim you cannot back up. The more often you catch those, the fewer surprises end up in a report with your name on them.

⚠️ A checklist helps, but no one runs through seven questions on every email. That is why several of these signs are worth automating. VerbaPulse flags risky claims, unprotected recipients, and policy breaks while you write, so the check happens whether or not you remember to pause. You can point it at your own communication policy, not just generic rules.

Next week: what EU law actually says about monitoring employee email, and how to stay compliant without it.