“Please use our new account for this month’s invoice. We need the transfer completed today.”
Pause before paying
The sender’s domain differs from your saved vendor. The message also asks you to change payment details.
Compare against the vendor domains you know.
Surface payment-change language.
Verify with your contact on a number you already have.
The evidence beside the verdict. A reason to review, not a payment approval.
BUILT FOR FINANCE & AP TEAMSVendor contextExplainable signalsOptional inbox actions
01 / See what is easy to miss
The request looks routine. The details tell a story.
Customs checks sender identity, links and the language of a request together. Your vendor list gives those signals the context your team already knows.
01 / IDENTITY
A name isn’t a sender.
Compare claimed brands and vendors with sending domains. Bring authentication failures and lookalike addresses into view.
02 / INTENT
A change worth checking.
Flag requests involving new bank details, transfers or urgent login actions, with the specific reasons attached.
03 / DESTINATION
The link behind the label.
Inspect link domains and supported redirect wrappers. Highlight mismatched link text and suspicious destinations before someone acts.
02 / An explainable second opinion
Show the reason. Make the next step clear.
Explore three illustrative situations. Customs uses rule-based signals to guide review. It cannot certify that a message or payment is safe.
USD per month. Microsoft 365 administrator approval required. Paid plans can be canceled from your account.
A few things to know
Clear expectations from the beginning.
Does Customs replace Microsoft Defender?
Customs provides an additional, explainable review of email. Keep your existing email security, access controls and payment-verification procedures.
Where is email processed?
Customs reads selected mail through Microsoft Graph and processes it on LabCMD’s servers. Sender details, subjects, verdicts and reasons are stored so you can review history. The privacy policy describes processing and retention.
What does Microsoft 365 approval allow?
Microsoft’s consent screen lists the app’s requested permissions. Mail read/write permissions can be broader than the inboxes selected inside Customs. Your administrator should review those permissions and restrict application access in Microsoft 365 where needed. See connection details.
Does it support Google Workspace?
Automated inbox scanning currently supports Microsoft 365. The public domain check works independently. Contact us about other providers.
Is a verdict a guarantee?
No. Verdicts come from rules and the information available to the scanner. They can miss fraud or flag legitimate messages. Verify unexpected payment changes through a known, independent channel.
Customs by LabCMD
Give your team a reason to pause before acting.
Start with one inbox and see the evidence for yourself.
