We have recently contracted with a third party for secure email. Now when we send an email with private information, it sends the recipient a notification to log into a secured site to retrieve it. I'm looking for suggestions on the wording of the notice that the recipient receives as we are concerned that our customers might think it could be a phishing scam.

Currently it says: "You have a secure email message waiting for you. Our records indicate that the email address listed above is not currenlty registered with MailSafe. Registration is required before viewing this secure email. Please click on the registration link below to begin the registration process." (Registration on requires an email address and password.)

Any suggestions for better wording?

Post a notice on your web site and possibly as a stuffer in advance so they know it is coming and that this is an extra step in the communication process, but it is intended to make them more secure. You should also do this in an email blast. Phishing scams have a short life-cycle. By sending a notice that says "in the next 30 days we'll be... and you should register, call if you have questions..." you help eliminate the doubts because phishers wouldn't go that long.

Do you mind me asking who you're using?

Post deleted by Andy Z

Does anyone know of any regulation that requires "two factor of authentification" requirements?

Not required, but it is a good idea as PKI helps verify authenticity and could reduce phishing losses.

We are using Perimeter.