The mailbox holder
A live face check on the sender’s phone, matched to the person enrolled for this mailbox. Outlook and Gmail never see the camera.
A mailbox login does not prove this person approved this text.
Human Confirmed is an optional check at send for wires, account changes, contracts, and executive instructions. Ordinary messages still send as usual.
Three facts, locked together
Business email compromise often does not need a stolen password. Someone reuses a real mailbox session and changes the amount or the destination after a trusted person has already looked at a draft.
This text
A fingerprint of the readable body they wrote. If someone later swaps the amount or the account number, the recipient check fails.
These recipients
A fingerprint of To and Cc. Changing who receives the mail after the face check is called out — a common wire-fraud pattern.
How a send works
Write the message in Outlook or Gmail as you normally would.
Start Human Confirmed when the content would hurt if an impostor rewrote it.
Scan the QR code and complete the face check in the phone browser. The computer does not get camera frames.
The stamp is inserted. Send. The recipient checks that their copy still matches.
An extra layer, not a replacement
Human Confirmed sits next to Defender, Proofpoint, Mimecast, Abnormal, DKIM, DMARC, and S/MIME. It does not replace them. Unverified mail is not blocked. The check is opt-in per send.