Browser-Based Email Verification for Law Firms
Protect clients from email fraud with passkey-authenticated verification
Law firms face a critical security challenge: email-based payment fraud. Cybercriminals impersonate solicitors, sending fake emails with fraudulent bank details. Clients lose hundreds of thousands in misdirected property completion payments.
Undoubt adds a verification layer to sensitive emails. When a solicitor sends bank details or payment instructions, they include a secure verification reference. Clients can instantly verify the information authenticity through a browser-based portal—no apps, no downloads, just peace of mind.
See how Undoubt works from both perspectives:
How solicitors send verified emails
Deploy Outlook add-in and configure passkey authentication
Write emails normally—no workflow changes required
One-click generation of secure verification reference
Email sent with verification snippet and full audit trail
How clients verify received instructions
Receives sensitive instructions with verification snippet
Navigates to firm's secure verification website
Sets up passkey (first time) or signs in with biometric
Submits reference code from email for verification
System verifies reference against recorded instructions
Clear confirmation: genuine, not found, or outdated
How clients submit verified instructions to the firm
Client accesses firm's secure verification portal
Signs in with passkey using biometric authentication
Choose instruction category (bank details, approval, etc.)
Provide information with validation and warnings
Cryptographically sign instruction for non-repudiation
Permanent, tamper-proof record with unique reference
Optional: Include reference in follow-up email
How solicitors verify customer-submitted instructions
Agent receives email from client with instruction reference
Outlook add-in detects or accepts customer reference code
Agent proves identity with passkey before querying
System verifies instruction authenticity and validity
View verdict: genuine, invalid, or outdated instruction
Biometric authentication ensures only authorized agents can create verification references
Seamlessly integrates with Microsoft 365—agents continue using familiar tools
Clients verify information through secure web portal—no apps to install
Every verification logged with timestamps, context, and authentication details
Agents write emails exactly as before—verification added with one click
Cryptographically secure references cannot be forged or modified