Email Scam Checker

Is this email a scam? Paste a suspicious email to check the real sender, fake links, lookalike domains, domain age and classic scam signs, with a clear risk score.

🔒 The check runs in your browser: the email is not uploaded. Only domain names are looked up, and we never open the links.

How to use the Email Scam Checker

  1. Copy the full suspicious email with its headers (for example in Gmail: ⋮ → "Show original"), or just the text, or a link.
  2. Paste it in the box (or open the .eml file) and click the check button.
  3. Read the risk level and each warning sign, with a plain explanation of why it matters.
  4. Follow the advice: do not click or pay, and report the scam if the risk is high.

About this tool

Phishing and scam emails copy the logos and tone of real companies. This checker looks at what is hard to fake: who really sent the email (SPF, DKIM and DMARC results, reply-to tricks), where the links really go, whether the domains imitate a known brand or were created a few days ago, and the wording scammers use (urgency, gift cards, crypto, prizes, account suspensions).

Frequently asked questions

Is this email scam checker free and private?

Yes, it is free. The analysis runs in your browser: the email is not uploaded. Only the domain names found in it are looked up (age and mail settings). If you click "Explain it simply", the email text is sent to our AI model to write the explanation and is not stored.

How do I get the full email with headers?

Gmail: open the email → ⋮ (More) → "Show original" → "Copy to clipboard". Outlook.com: open the email → … → View → "View message source". Outlook desktop: File → Properties → "Internet headers" (or save it as .eml/.msg). Apple Mail: View → Message → "Raw Source". Yahoo: … → "View raw message". You can also save the email as an .eml file and open it here.

Can it say that an email is 100% safe?

No tool can. A low risk score means none of the common scam signs were found. Always be careful when an email asks you to log in, pay or share personal details: go to the company website or app yourself instead.

Do you open the links in the email?

Never. Links are only read as text and their domain names are checked; nothing is visited, so a malicious page cannot run.

What should I do if I already clicked or paid?

Change the password you typed (and anywhere you reuse it), turn on two-factor authentication, and call your bank right away using the number on your card if you shared card details or sent money. Then report the scam to the police or your national fraud service.

Does it work on mobile?

Yes, it works in any modern browser on phones, tablets and computers. No app to install.

Related tools

Password GeneratorGenerate strong, random passwords in your browser using a secure random source.Password Strength CheckerCheck how strong a password is, its entropy and estimated crack time. Runs 100% in your browser; nothing is sent.Passphrase GeneratorGenerate memorable, strong passphrases from random words (diceware style).PIN GeneratorGenerate random numeric PIN codes (4, 6 or more digits).API Key & Token GeneratorGenerate secure random API keys, secrets and tokens in hex, Base64 or Base64URL.Suspicious Link CheckerNewCheck a link from an email, SMS or message before you click it: fake brand domains, lookalike letters, hidden destinations, risky domain endings and domain age.Bcrypt Hash Generator & CheckerHash a password with bcrypt or check a password against an existing bcrypt hash. Runs locally.Remove WhitespaceRemove extra spaces, tabs and blank lines from text, or strip every whitespace character at once.Remove Line BreaksTurn text broken across many lines (PDF copy-paste, emails) into clean single-line paragraphs.