Fellow automatically scans public note series for malicious content to protect users from spam, malware, phishing, and other security threats. If a public note series is flagged as unsafe, it means our security scanning detected potentially harmful content like suspicious links, malware, or prohibited material. Understanding what triggers these flags helps you remove problematic content and prevent future warnings.
How Fellow's Security Scanning Works
Fellow prioritizes user security by automatically monitoring public content:
What gets scanned:
All public note series (shared via public links)
Links within public notes
Embedded content and attachments
Images and videos
Text content
When scanning happens:
Regularly scheduled scans of all public content
When public links are created or updated
When content is modified in public notes
What triggers a flag:
Links to known phishing or malware sites
Suspicious file attachments
Illegal or prohibited content
Patterns matching spam or scam content
URLs on security watchlists
What doesn't get scanned:
Private meeting notes
Notes shared only with specific attendees
Content in non-public note series
Your Note Series Was Flagged - What to Do
If you created a public note series that was flagged, follow these steps:
Step 1: Review your content
Look through the public note series for potentially problematic content:
Check for suspicious links:
External links that might be on security watchlists
Shortened URLs (bit.ly, tinyurl, etc.) pointing to flagged sites
Links to file sharing sites with questionable content
Any URLs you don't recognize or didn't add
Check for attachments:
Files that might contain malware
Executables or scripts (.exe, .bat, .sh files)
Unexpected attachments you didn't add
Check for embedded content:
Embedded videos or media from flagged sources
Images containing illegal material
Content that violates policies
Step 2: Remove problematic content
Delete or update any content that could be causing the flag:
Open the flagged public note series
Find and remove suspicious links, attachments, or content
Delete any embedded media from questionable sources
Update any shortened URLs to full, recognizable URLs
Remove any content you're unsure about
Step 3: Wait for automatic flag removal
After removing problematic content:
The flag will be automatically removed within 15 minutes
No action needed - scanning happens automatically
Refresh the public link page after 15 minutes to verify
If the flag persists after 15 minutes and you've removed all potentially malicious content, contact Fellow Support for assistance.
You Received a Flagged Link - What to Do
If someone sent you a link to a public note series and you see a security warning:
Step 1: Verify the sender
Before clicking "Proceed anyway":
Contact the person who sent you the link
Verify they intentionally shared this specific note
Ask if they're aware of any security issues
Confirm the link wasn't sent from a compromised account
Step 2: Decide whether to proceed
If sender confirms it's legitimate:
They intended to send this specific link
They assure no malicious content exists
You trust this person
Action: Click "Proceed anyway" if you're comfortable
If sender seems unsure or didn't send it:
They don't remember sending it
Link came from compromised account
Content seems suspicious
Action: Close the tab immediately and don't proceed
Important: Even if the sender confirms, use caution. The flag exists for a reason - security services detected something potentially harmful.
When in doubt, don't proceed
If you're uncertain about the safety of the content:
Don't click "Proceed anyway"
Ask the sender to remove the flagged content and share a new link
Request they share the information through a different method (email, direct message)
Report Malicious Content
If you discover a public note series with malicious content that wasn't automatically flagged:
How to report
Open the public note series
Click the three dot menu in the upper right corner
Select Report note series
Specify the reason for your report
Add details about what makes it unsafe
Optionally provide your email for updates
Submit the report
What to include in your report:
Type of malicious content (phishing link, malware, etc.)
Specific location in the note (which section, which link)
Any context about how you found it
Why you believe it's unsafe
What happens next:
Fellow's security team reviews the report
If confirmed malicious, the note series is flagged
Creator is notified to remove the content
If you provided an email, you'll receive updates
Privacy note: Email addresses submitted with reports are only used to send updates about that specific report.
Prevention: Creating Safe Public Links
To avoid accidentally triggering security flags when creating public note series:
Link best practices:
Use full, recognizable URLs instead of shortened links
Only include links to reputable, well-known sites
Verify all links work and go to expected destinations
Remove any suspicious links before making notes public
Content guidelines:
Only share appropriate, work-related content publicly
Don't include sensitive or confidential information in public notes
Review all embedded media before sharing publicly
Remove any files or attachments of questionable origin
Before creating public links:
Review all content in the note series
Remove anything that could trigger security flags
Verify all links are legitimate and necessary
Test the public link yourself first
Understanding Public vs Private Notes
Public note series:
Accessible to anyone with the link
Subject to security scanning
Can be flagged if malicious content detected
Should contain only appropriate, safe content
Private notes:
Only accessible to specified attendees or users
Not subject to public content scanning
Better for sensitive or internal content
Recommended for most work content
When to use public links:
Sharing with external stakeholders who don't have Fellow accounts
Publishing content meant for broad audiences
Distributing read-only meeting recaps
Creating shareable resources
When NOT to use public links:
Sensitive company information
Confidential meeting notes
Internal-only discussions
Content with many external links (use direct sharing instead)
Troubleshooting
Flag won't clear after removing content
Possible causes:
Less than 15 minutes have passed
Some flagged content remains
Cache showing old version
Solutions:
Wait the full 15 minutes for automatic rescanning
Review the note again for any missed suspicious content
Clear your browser cache and reload the page
Contact Fellow Support if flag persists beyond 15 minutes
Don't know what content triggered the flag
Solution:
Contact Fellow Support
Provide the public note series link
Support team can help identify the flagged content
Remove the identified content and wait 15 minutes
Need to share content immediately but it's flagged
Solutions:
Option 1: Remove public link and use direct sharing:
Disable the public link
Share directly with specific people using Fellow's share button
No security flag applies to non-public shares
Option 2: Remove flagged content:
Identify and remove problematic content
Wait 15 minutes for flag to clear
Share the public link
Option 3: Create new note without flagged content:
Create a new note series
Copy safe content from the flagged note
Don't include suspicious links or content
Create public link for the new note
Legitimately flagged content is safe
Cause: Security services sometimes flag legitimate content (false positive).
Solutions:
Remove the flagged link or content
If the link is essential, use a different sharing method
Contact Fellow Support to review if you believe it's a false positive
Consider sharing via email or direct message instead of public link
Public link shows warning but I didn't create it
Cause: Someone else created the public link and shared it with you.
Solution:
Contact the person who sent you the link
Inform them their public note is flagged
Don't proceed unless they verify it's safe and remove flagged content
Report to Fellow if you suspect it's malicious
Want to understand what was flagged
For creators:
Contact Fellow Support with the public link
Support can identify which specific content triggered the flag
Remove that content to clear the warning
For viewers:
Don't proceed if you're unsure
Contact the creator to ask them to investigate
Report the note series if you believe it's malicious