A computer system comprising: a processor; a display; a memory device holding an instruction set executable on the processor to cause the computer system to perform operations comprising: detecting receipt of a message including a selectable functionality for accessing an external resource and including message data indicative of a source of the message by, responsive to receipt of the message, comparing text describing the external resource to the message data, and determining, based on the comparison, whether an extent of a discrepancy between the text describing the external resource and the message data meets a suspiciousness threshold; predicting when a recipient of the message will interact with the selectable functionality by accessing historical message interaction data associated with the recipient, comparing at least one interaction of the recipient with the message against at least a portion of the historical message interaction data, and predicting, based on the comparison, when a selection by the recipient of the selectable functionality will occur; generating a message alert feature based on the extent of a discrepancy between the text describing the external resource and the message data meeting the suspiciousness threshold; and presenting the message alert feature, on the display, prior to the predicted interaction of the recipient with the selectable functionality. a processor; a display; a memory device holding an instruction set executable on the processor to cause the computer system to perform operations comprising: detecting receipt of a message including a selectable functionality for accessing an external resource and including message data indicative of a source of the message by, responsive to receipt of the message, comparing text describing the external resource to the message data, and determining, based on the comparison, whether an extent of a discrepancy between the text describing the external resource and the message data meets a suspiciousness threshold; predicting when a recipient of the message will interact with the selectable functionality by accessing historical message interaction data associated with the recipient, comparing at least one interaction of the recipient with the message against at least a portion of the historical message interaction data, and predicting, based on the comparison, when a selection by the recipient of the selectable functionality will occur; generating a message alert feature based on the extent of a discrepancy between the text describing the external resource and the message data meeting the suspiciousness threshold; and presenting the message alert feature, on the display, prior to the predicted interaction of the recipient with the selectable functionality. detecting receipt of a message including a selectable functionality for accessing an external resource and including message data indicative of a source of the message by, responsive to receipt of the message, comparing text describing the external resource to the message data, and determining, based on the comparison, whether an extent of a discrepancy between the text describing the external resource and the message data meets a suspiciousness threshold; predicting when a recipient of the message will interact with the selectable functionality by accessing historical message interaction data associated with the recipient, comparing at least one interaction of the recipient with the message against at least a portion of the historical message interaction data, and predicting, based on the comparison, when a selection by the recipient of the selectable functionality will occur; generating a message alert feature based on the extent of a discrepancy between the text describing the external resource and the message data meeting the suspiciousness threshold; and presenting the message alert feature, on the display, prior to the predicted interaction of the recipient with the selectable functionality.