How do I resolve False Positives for Brand Display Name Imposter attacks?

Agari Phishing Defense (APD) may incorrectly flag a message as a Brand Display Name Imposter (BDNI). This typically happens when a company uses a well-known brand in the display name or local part, such as "Amazon Survey Gift Card" while coming from a domain other than Amazon. It is also sometimes common for your own company to use known brands in your own services, causing BDNI False Positives (FPs). The BDNI model looks for past relationships between a brand name in the display or the local part of the full header from and the header from the domain.

If you want to override APDs BDNI attack classification for a domain, tagging the domain as Internal, Partner, or Service will make an exception for that domain and stop calling messages from that domain BDNIs.

Please note that these domain tag overrides will not work with webmail domains (e.g, Hotmail, Gmail, etc). Please also keep in mind that tagging the domain as Internal or Partner will also raise the domain reputation score. For more information about domain tags please see, What are domain tags and how do they affect messages in my APD portal?.