Webmail has a feature that will disable links in an email.
Rather than a blanket "turn off all links" option, Webmail automatically disables the hyperlinks in messages that are risky — specifically, any message that has been flagged as spam or that fails sender authentication (SPF/DKIM/DMARC). In those messages, URLs and email addresses are still shown as plain text, but they are no longer clickable, which protects users from phishing links.
When a message has its links disabled, the recipient sees a notice at the top of the message:
"Hyperlinks are disabled. Click here to enable them."
If the user trusts that particular message, they can click that notice to re‑enable the links for that message only.
Enabling / confirming the feature
This protection is enabled by default, so in most cases there's nothing you need to turn on — it's already active for spam and authentication‑failing messages. If it isn't taking effect on your system, confirm the Webmail user default setting "Disable Hyperlinks in Spam" is enabled (Main | Webmail Settings | Settings).
Optional: allow links from trusted senders
Each user can create an exception so that links are never disabled for people they trust. In Webmail:
- Go to Options → Personalize.
- Enable "Do Not Disable Hyperlinks For Allowed Senders."
- Save.
With that enabled, hyperlinks will always remain clickable in messages from anyone in the user's Allowed Senders list or default Contacts folder, even if the message is otherwise flagged.
If you would prefer to replace a hyperlink with a warning, you'd need to write a content filter rule to detect the hyperlink and replace it, using the search and replace action. Replacing the hyperlink means the url would be lost and there would be no way to retrieve it.