Help! Phishing Tests Say "Via KnowBe4"
If you’re using Gmail and you notice that when simulated phishing emails arrive in your inbox, that there is an additional line of text by the FROM field that says "Via KnowBe4", you may need to turn off the return-path header in your KnowBe4 account settings.
The reason this appears is because we set the address of firstname.lastname@example.org in every return-path header. It helps us to pass SPF checks since most mail filters look at the return-path email address for SPF.
There is an option in your account settings to disable the return-path header so that it will no longer appear in your phishing tests. To find this, log in to your KnowBe4 console, then in the upper right-hand corner click your email address, then Account. On the page that follows you'll see that you can edit some of your basic account settings.
Scroll to the Phishing header, and you will see an option with a checkbox to 'Disable return path header". Simply check the box and update your account info to save your changes. You can test out that the issue was corrected by sending a test phishing email to yourself.
Disabling Return Path Header in Account Settings
Keep in mind that this action does increase the possibility that our phishing emails will be flagged as 'junk mail'.
To avoid our emails being flagged as junk, be sure to follow our whitelisting procedures. Current whitelisting information can be found in the following article:
For Google, you can read this article which explains where/how this is done: https://support.google.com/a/answer/60751?hl=en