The checker reads one suspicious email. Batmail reads your whole inbox overnight.
Paste the Chase email into the checker and it reads it for the signs below.
The checker reads the sender address, the wording, any link address you paste with the email and what the email asks you to do. It gives a verdict, a risk score from 0 to 100, the exact wording behind each red flag and what to do next. It is free and needs no signup.
Batmail phishing email checker
A fake Chase email says a payment was flagged as fraud, then asks you to move your money.
Chase’s page on spotting scams says impostors may claim there is fraud on your account and put pressure on you to act fast. Its page on bank impersonation scams says to treat an unsolicited call or text from your bank about an urgent issue with caution. The email below is invented, and each number is one of the signs.
Example
Dear customer,
We have flagged a payment of $1,240.00 from your account as fraud.
To protect your money, transfer your balance to the new safe account in the link below.
Call 1-800-555-0144 within 30 minutes or your account will be closed.
The button says chase.com/secure
The sender's address is not at chase.com.
The display name says Chase Security, but the part after the @ belongs to someone else. Chase says to check the sender's actual email address, not just the display name.
A claim that a payment was flagged as fraud.
Chase says impostors may claim there's fraud on your account and put pressure on you to act fast.
A request to move your balance to a safe account.
Chase says legitimate banks will never ask you to move money to resolve a fraud issue.
A phone number and a 30-minute deadline.
Chase says there are virtually no circumstances under which a real bank representative would pressure you to do anything immediately.
A button that says chase.com and goes somewhere else.
Chase says to hover over links to confirm they go to the official website, and never to click links or download attachments if something feels off.
From Chase: How to spot scams, read 7 November 2026.
From Chase: How to Identify Bank Impersonation Scams, read 7 November 2026.
Read the sender's address from the right, because the last two parts say who owns it.
Anyone can put “Chase” in front of an address. The part to read is the domain, after the @ in a sender or after the https:// in a link. Read it from the right: the last two parts name the owner, and everything in front of them is only a label the owner chose. Chase’s own security pages are at www.chase.com, and the owner of that address is chase.com.
Read the domain from the right
www.chase.com
From ChaseOwned by chase.com. This is the address of Chase's own security pages.
chase.com.safe-account.example
Not from ChaseOwned by safe-account.example. chase.com is only a label in front of it.
chase-secure-review.example
Not from ChaseOwned by chase-secure-review.example. The name has Chase in it, but the owner is someone else.
From Chase: How to spot scams, read 7 November 2026.
Chase says a real bank will never ask you to move money to fix a fraud problem.
Chase’s two pages on scams give short rules for the calls, texts and emails that use a bank’s name. A fake fraud alert breaks at least one of them.
| Question | What Chase says | What a fake fraud alert does |
|---|---|---|
| Will a bank ask me to move money to fix fraud? | What Chase saysChase says legitimate banks will never ask you to move money to resolve a fraud issue. | What a fake fraud alert doesTells you to transfer your balance to a "safe account". |
| Will a bank or the police ask me to help with a sting? | What Chase saysChase says banks, police and government agencies never run "sting operations" with customers or ask you to distrust employees. | What a fake fraud alert doesTells you to lie to bank staff about why you are moving the money. |
| Does the sender's name or caller ID prove it is Chase? | What Chase saysChase says scammers can make caller ID, emails and texts display as messages from your bank. | What a fake fraud alert doesA display name that says Chase, or a call from a number that looks like your bank's. |
| Will a bank ask for remote access to my device? | What Chase saysChase says a request for remote access is most likely a scammer trying to access your accounts. | What a fake fraud alert doesAsks you to install an app so they can "fix" the problem. |
From Chase: How to spot scams, read 7 November 2026.
From Chase: How to Identify Bank Impersonation Scams, read 7 November 2026.
To check a Chase message, hang up or stop reading, then call the number on your card.
Chase says that if you are contacted by phone, you should hang up, and not try to close out the conversation politely. For an email or a text, do not click any links or open any attachments. In every case, Chase says to contact the bank on a number you already trust.
How to check a message that says it is from Chase
- Stop
Hang up, or click nothing.
Chase says not to try to close out the call politely, and to open no links or attachments.
- Ignore their details
Not their number, link or email.
Chase says never to use what the sender gave you, and not to just redial the last call.
- Call your own number
The one on your card or statement.
Chase also names the bank's official mobile app or website.
From Chase: How to Identify Bank Impersonation Scams, read 7 November 2026.
Five steps tell you whether a Chase email is real without clicking anything.
- Leave the button and every link alone. Chase says never to click links or download attachments if something feels off.
- Read the sender’s actual address from the right, as in the picture above, and hover over links to see where they go. Chase says the display name alone proves nothing.
- Call Chase on the number on the back of your card, on your account statement, or in the official app or website. Chase says never to use the number, link or email the suspicious sender gave you.
- Paste the email into the checker at the top of this page for a second read.
- Forward the email to phishing@chase.com, as Chase says. In Gmail you can also choose More next to Reply, then Report phishing.
Steps from Chase: How to spot scams, read 7 November 2026.
Steps from Gmail Help: Avoid & report phishing emails, read 7 November 2026.
If you shared your login, Chase says to change the password on every account that uses it.
Chase says each situation is different. If you shared your credentials, it says to change your username and password on that account and on any other account that uses the same login information. If you think you gave a scammer account information, it says to contact your bank so they can help assess the situation. Its page on bank impersonation scams also points to ReportFraud.ftc.gov, a credit freeze or fraud alert, and IdentityTheft.gov.
What to do depends on what you did
You only read it.
Forward it to phishing@chase.com.
You clicked, or shared your login.
Change your username and password on that account, and on any other account that uses the same login. If something may have downloaded, update your security software and run a scan.
You moved money, or gave account information.
Call your bank on the number on your card so it can assess the situation, then follow the steps at IdentityTheft.gov for what you shared.
From Chase: How to Identify Bank Impersonation Scams, read 7 November 2026.
From FTC Consumer Advice: What To Do if You Were Scammed, read 7 November 2026.
From FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 7 November 2026.
The same checks work on other bank emails.
A fraud alert can borrow the name of any bank. The guide to fake Wells Fargo emails covers a support tool that shares your screen, and the guide to fake Bank of America emails covers an email that tells you not to call. The holiday scam emails guide puts the kinds side by side.
These are the questions people ask next.
How can I tell a real Chase email from a fake one?
Chase says to check the sender's actual email address, not just the display name, to look for artificial urgency or threats, and to hover over links to confirm they go to the official website. It says scammers can make caller ID, emails and texts look like they come from your bank.
Will Chase ever ask me to move money to stop fraud?
No. Chase says legitimate banks will never ask you to move money to resolve a fraud issue, and that banks, police and government agencies never run sting operations with customers or ask you to distrust bank employees.
Where do I forward a fake Chase email?
Chase says to forward the email to phishing@chase.com. Its page on bank impersonation scams also points to ReportFraud.ftc.gov. In Gmail you can also open the message, choose More next to Reply, then Report phishing.
What if the caller ID shows Chase's number?
Chase says scammers manipulate caller ID to show your bank's number. It says to hang up and not to try to close out the conversation, not to use the number or link the caller gave you, and not to just redial the last call. Call the number on your card, your account statement, or the official app or website.
What should I do if I shared my login?
Chase says to change your username and password on that account and on any other account that uses the same login information. If you think you gave a scammer account information, it says to contact your bank so they can help assess the situation.
What if I clicked a link or gave my details?
Chase says each situation is different, and points you to its security center, ReportFraud.ftc.gov and IdentityTheft.gov. If something may have downloaded, the FTC says to update your computer's security software and run a scan.
Every step on this page comes from these official pages.
Read on . Spot a step that has changed? Email support@batmail.ai and we will fix it.