An External recipient warning in work Gmail reminds you that an address is outside your organization. It is not proof that the person is malicious, and the absence of a warning is not proof that the recipient is internal or safe.
Read the full destination before sending
Expand the recipient chips and inspect every address in To, Cc, and Bcc. Check the domain carefully, especially when a familiar name appears beside an unfamiliar address.
Google’s warning can appear while composing, replying to an external person, or viewing a thread with external recipients. A long conversation may include someone added later, so review the current reply rather than relying on the first message.
Understand the warning’s limits
The feature is for managed work or school Gmail, not personal Gmail. An administrator controls it. Google’s documentation says warnings are not shown for some external addresses already in the organization’s Directory, personal Contacts, or Other contacts.
Secondary-domain and domain-alias addresses also have specific treatment. Therefore, use the actual address and your business context as the decision basis. Do not add an unknown address to Contacts simply to make a warning disappear.
Resolve an unexpected warning narrowly
If a trusted partner is marked external, that may be correct: a partner can be legitimate while remaining outside the organization. Verify that the intended information may be shared with that recipient under your policy.
If a colleague’s address seems misclassified, ask the administrator to check the domain and directory configuration. Do not turn warnings off organization-wide to fix one confusing display. Administrators can review the effective organizational-unit setting and change history. Before sending a sensitive reply, also inspect quoted history and attachments; a safe new paragraph does not remove confidential information from the rest of the thread.
Browse Gmail & Google Account help
References
Reviewed against the linked product guidance, standards, and identified vendor or public-authority guidance on October 29, 2026. Available options and screen labels can vary by account, device, region, and organization policy.