Not sure about an email? Check it before you click.
Check a saved email, a link, or the text of a message and get a verdict in seconds. Everything is checked by your browser, right here. Nothing is uploaded, and this page is locked so it can't send data anywhere.
The most complete check, because it can see who really sent the email. Best on a computer. On a phone, use A link or Email text.
Don't tap the link. On a phone, press and hold it, choose Copy Link, then paste it here. On a computer, right-click it and choose Copy link. The link is only read, never opened.
Checks the wording for scam tactics and any links written out in the text. It can't tell who really sent it. For that, use Email file on a computer.
- Nothing is uploaded. Parsing happens in your browser.
- Can't phone home. The page's security policy blocks all network requests.
- Nothing is rendered. Email content is shown as plain text only - no scripts, images or trackers.
How to save an email as a file
Don't forward the email to yourself first - forwarding strips the details needed to check the sender. Use a computer; phone mail apps usually can't save emails. On a phone, use A link or Email text above instead.
- Outlook (classic, Windows)
- Drag the email from the message list onto your desktop. That makes a
.msgfile. Or open it and choose File → Save As. - New Outlook / Outlook on the web
- Open the email, click ⋯ (More actions) → Save as / Download. That gives you an
.eml. - Gmail
- Open the email, click ⋮ (More) → Download message. Or ⋮ → Show original → Copy to clipboard and use "Paste the email source".
- Apple Mail
- Select the email, then File → Save As… → Format: Raw Message Source. Or drag it to the desktop.
- Thunderbird
- Open the email, then File → Save As → File.
- Yahoo Mail
- Open the email, ⋯ → View raw message, then copy it into "Paste the email source".
What does it check?
Sender authentication (SPF, DKIM, DMARC) and spoofing, brand impersonation and lookalike domains, links whose text doesn't match where they go (including links wrapped by Microsoft Safe Links, Proofpoint and Barracuda), dangerous attachments and HTML smuggling, QR-code and call-this-number scams, payment and gift-card requests, and the verdicts mail filters already stamped into the headers. Forwarded-as-attachment emails are unpacked and the original is checked.
It's an automated, rules-based check that runs offline. It can be wrong in either direction, so use it as a second opinion, not a guarantee.