Mitigating communication risk by verifying a sender of a message

1. A method for securing a message, comprising:

performing a first risk analysis of the message, wherein performing the first risk analysis of the message includes determining whether sender information associated with the message matches information associated with a trusted contact;

in response to the first risk analysis resulting in a determination that the message meets a first criteria that indicates the sender information associated with the message does not match the information associated with the trusted contact and a similarity measure between the sender information associated with the message and the information associated with the trusted contact is greater than a similarity threshold value, performing operations comprising:

modifying at least a portion of the message prior to sending a modified version of the message to a specified recipient of the message, wherein the modified version of the message at least includes data in a data field of the message that indicates an identification of a sender of the message, wherein the data in the data field of the message at least includes a warning; and

performing a second risk analysis of the message including by:

performing an automatic computer analysis of the message, wherein the automatic computer analysis of the message classifies the sender of the message;

sending to the specified recipient a request to classify the sender of the message;

receiving from the specified recipient a response to the request to classify the sender of the message; and

matching a classification of the automatic computer analysis to the response to classify the sender of the message, wherein the first risk analysis is performed before sending the modified version of the message and the modified version of the message is sent to the specified recipient of the message prior to a conclusion of the second risk analysis; and

in response to matching the classification of the automatic computer analysis to the response to classify the sender of the message, providing to the specified recipient of the message, content of the message that was previously prevented from being accessed by the specified recipient,

wherein performing the first risk analysis or the second risk analysis of the message includes:

sending to the sender of the message a reply message requesting the sender to provide an evidence of validity of the sender and the evidence of validity of the sender includes a proof of access to an alternate email message account; and

detecting that a threshold number of messages have been forwarded to an external message account by the sender of the message and requesting a verification from the sender that the external message account is the alternate email message account of the sender.

2. The method of claim 1 , wherein modifying at least the portion of the message includes redacting at least the portion of the message.

3. The method of claim 1 , wherein modifying at least the portion of the message includes modifying an identifier of the sender of the message.

4. The method of claim 1 , wherein performing the first risk analysis of the message includes analyzing a sender identifier included in the message.

5. The method of claim 1 , wherein modifying at least the portion of the message includes inserting in the message a user inquiry associated with a verification of the sender of the message, and the user inquiry requests a user response.

6. The method of claim 1 , wherein modifying at least the portion of the message includes modifying the message to include a list of hyperlinked options associated with possible classification selection options of the sender of the message.

7. The method of claim 1 , wherein classifying the sender of the message includes determining whether the sender of the message has previously communicated with the specified recipient of the message a threshold number of times.

8. The method of claim 1 , wherein performing the second risk analysis of the message includes determining whether the sender of the message shares a same network domain with the specified recipient of the message.

9. The method of claim 1 , wherein performing the first risk analysis or the second risk analysis of the message includes sending to the sender of the message the reply message requesting the sender verify that the sender sent the message.

10. The method of claim 1 , further comprising, providing in a secure message interaction interface region associated with the message, an actionable element indicated in a header of the message and the actionable element is able to be selected by a user to perform an associated action.

11. The method of claim 1 , further comprising, configuring a rule filter that detects when a new message is forwarded and subsequently deleted from a message account.

12. The method of claim 1 , further comprising receiving a new message to be sent and adding a unique subdomain to a sender address of the new message prior to sending the new message.

13. The method of claim 1 , further comprising tracking a baseline message traffic measure for each message sending entity for at least messages received by a same recipient and detecting a message bomb attack using the baseline message traffic measures.

14. A system for securing a message, comprising:

a processor configured to:

perform a first risk analysis of the message, wherein performing the first risk analysis of the message includes determining whether sender information associated with the message matches information associated with a trusted contact;

in response to the first risk analysis resulting in a determination that the message meets a first criteria that indicates the sender information associated with the message does not match the information associated with the trusted contact and a similarity measure between the sender information associated with the message and the information associated with the trusted contact is greater than a similarity threshold value, the processor is further configured to:

modify at least a portion of the message prior to sending a modified version of the message to a specified recipient of the message, wherein the modified version of the message at least includes data in a data field of the message that indicates an identification of a sender of the message, wherein the data in the data field of the message at least includes a warning; and

perform a second risk analysis of the message including by:

performing an automatic computer analysis of the message, wherein the automatic computer analysis of the message classifies the sender of the message;

sending to the specified recipient a request to classify the sender of the message;

receiving from the specified recipient a response to the request to classify the sender of the message; and

matching a classification of the automatic computer analysis to the response to classify the sender of the message, wherein the first risk analysis is performed before sending the modified version of the message and the modified version of the message is sent to the specified recipient of the message prior to a conclusion of the second risk analysis; and

in response to matching the classification of the automatic computer analysis to the response to classify the sender of the message, provide to the specified recipient of the message, content of the message that was previously prevented from being accessed by the specified recipient, wherein to perform the first risk analysis or the second risk analysis of the message, the processor is configured to:

send to the sender of the message a reply message requesting the sender to provide an evidence of validity of the sender and the evidence of validity of the sender includes a proof of access to an alternate email message account; and

detect that a threshold number of messages have been forwarded to an external message account by the sender of the message and requesting a verification from the sender that the external message account is the alternate email message account of the sender; and

a memory coupled to the processor and configured to provide the processor with instructions.