Free tool

Is this email a scam? Have a look first.

Paste a suspicious email and we will read it for the obvious phishing signs. No sign-up, nothing stored. A sensible second opinion, in plain English.

Start checking

What we look for

The obvious signs first, the subtle ones next.

01
Sender impersonation
A display name that says "Microsoft" but a domain that does not match the real one.
02
Lookalike domains
Domains designed to look like a brand at a glance: "m1crosoft" instead of "microsoft".
03
Urgency and pressure
Phrases like "urgent", "act now", "your account will be suspended" used to rush you.
04
Credential prompts
"Verify your account", "confirm your details" or "sign in to confirm" via a link.
05
Unusual payment language
Wire transfers, gift cards, crypto, "parcel fees" or unexpected refunds.
06
Suspicious links
Links to unusual top-level domains, IP addresses or URL shorteners that hide the host.
07
Risky attachments
Mentions of .exe, .scr, .iso or password-protected archives.
08
Subject-line tells
All capitals, multiple exclamation marks, generic greetings like "Dear customer".
09
Free-mail impersonation
A "company" emailing you from a gmail.com or outlook.com address.

This is a heuristic check, not a guarantee. If you are still unsure, do not click any links in the email, do not reply, and contact the supposed sender on a phone number you find independently. We can also have a look for you if you would like a second opinion.

Get in touch

Want practical security for the rest of your tech?

We help businesses in Kent with sensible security: multi-factor authentication, password managers, tested backups and clear staff guidance. No scare tactics.

Talk about security Or call 07440 197197

§ LoadingJust a moment

The obvious signs first, the subtle ones next.

Sender impersonation

A display name that says "Microsoft" but a domain that does not match the real one.

Lookalike domains

Domains designed to look like a brand at a glance: "m1crosoft" instead of "microsoft".

Urgency and pressure

Phrases like "urgent", "act now", "your account will be suspended" used to rush you.

Credential prompts

"Verify your account", "confirm your details" or "sign in to confirm" via a link.

Unusual payment language

Wire transfers, gift cards, crypto, "parcel fees" or unexpected refunds.

Suspicious links

Links to unusual top-level domains, IP addresses or URL shorteners that hide the host.

Risky attachments

Mentions of .exe, .scr, .iso or password-protected archives.

Subject-line tells

All capitals, multiple exclamation marks, generic greetings like "Dear customer".

Free-mail impersonation

A "company" emailing you from a gmail.com or outlook.com address.