The checker reads one suspicious email. Batmail reads your whole inbox overnight.
Paste the Discover email into the checker and it reads it for the signs below.
The checker reads the sender address, the wording, any link address you paste with the email and what the email asks you to do. It gives a verdict, a risk score from 0 to 100, the exact wording behind each red flag and what to do next. It is free and needs no signup.
Batmail phishing email checker
A fake Discover email uses a generic greeting, scares you with a deadline and asks you to keep it quiet.
Discover’s page on financial scams lists the signs of a phishing email and the tactics scammers use to catch you off guard. The email below is invented, and each number is one of the signs.
Example
Dear Customer,
Unusual activity was found on your card, and it will be locked in 12 hours.
Confirm your card number and security code at the link below to keep using it.
Keep this message private. Do not call your bank about it.
The button says discover.com/confirm
A suspicious address from a sender you do not know.
Discover lists a suspicious email address from an unfamiliar sender as a sign of a phishing email, and says that even if an email address looks legitimate it may not be.
A generic name instead of your real name.
Discover lists a generic name instead of your real name as a sign of a phishing email.
An urgent message to scare you into action.
Discover says pressure to immediately transfer money or information is a red flag, and that legitimate organizations and opportunities usually give you time to consider.
A request for secrecy.
Discover says most transactions you make are yours to share should you choose, and that requests for secrecy often come with questionable motives.
A button that says discover.com and goes somewhere else.
Discover lists unusual or mismatched hyperlinks as a sign, and says to hover your mouse over the link first to see and verify the actual URL.
From Discover: Protect yourself against financial scams, read 9 November 2026.
Read the sender's address from the right, because the last two parts say who owns it.
Anyone can put “Discover” in front of an address. The part to read is the domain, after the @ in a sender or after the https:// in a link. Read it from the right: the last two parts name the owner, and everything in front of them is only a label the owner chose. Discover’s page on financial scams is at www.discover.com, and the owner of that address is discover.com. The Discover pages we read do not list the addresses Discover sends from, so the rule here is the one every address follows.
Read the domain from the right
www.discover.com
From DiscoverOwned by discover.com. This is the address of Discover's own page on financial scams.
discover.com.card-review.example
Not from DiscoverOwned by card-review.example. discover.com is only a label in front of it.
discover-card-alerts.example
Not from DiscoverOwned by discover-card-alerts.example. The name has Discover in it, but the owner is someone else.
From Discover: Protect yourself against financial scams, read 9 November 2026.
Discover lists signs of a phishing email, but its pages do not list what it will never ask for.
Discover’s pages give five signs of a phishing email and three tactics scammers use. They are silent on a never-ask list, so the signs are what to hold a message up against.
| Question | What Discover says | What a fake card alert does |
|---|---|---|
| Is the sender's address one I know? | What Discover saysDiscover lists a suspicious email address from an unfamiliar sender as a sign, and says that even if an email address looks legitimate it may not be. | What a fake card alert doesComes from an address with Discover in its name and someone else's domain. |
| Does it use my real name? | What Discover saysDiscover lists a generic name instead of your real name as a sign of a phishing email. | What a fake card alert doesStarts with "Dear Customer". |
| Does it try to scare me or hurry me? | What Discover saysDiscover lists an urgent message to scare you into action, and says legitimate organizations and opportunities usually give you time to consider. | What a fake card alert doesSays the card will be locked in 12 hours. |
| Does the link match? | What Discover saysDiscover lists unusual or mismatched hyperlinks, and says to hover your mouse over the link first to verify the actual URL. | What a fake card alert doesA button that says discover.com and opens another site. |
| Does it ask me to keep it secret? | What Discover saysDiscover says requests for secrecy often come with questionable motives. | What a fake card alert doesSays to keep the message private. |
From Discover: Protect yourself against financial scams, read 9 November 2026.
From Discover: Protect yourself against cybercriminals, read 9 November 2026.
Discover says to send a suspicious email to emailwatch@discover.com and to call if you think your account is compromised.
Discover gives one address for a suspicious email and one number for help right away, and says you can always hang up and call back a trusted number.
How to report a fake Discover email
- Send the email
To emailwatch@discover.com.
Discover says to send the suspicious email to emailwatch@discover.com.
- Go to the real site
Hang up, or open the site yourself.
Discover says you can always hang up and call back to a trusted number or go to the company's trusted website.
- Call if worried
1-800-DISCOVER, at once.
Discover says to call 1-800-DISCOVER (1-800-347-2683) right away if you think your account security has been compromised because of a phishing email.
From Discover: Protect yourself against financial scams, read 9 November 2026.
Five steps tell you whether a Discover email is real without clicking anything.
- Leave the button and every link alone. Discover says to hover your mouse over a link to verify the actual URL, and that if the sender looks suspicious you should not click the link or download any attachments.
- Read the sender’s actual address from the right, as in the picture above, and notice whether it uses your real name.
- Check your card by opening Discover’s site or app yourself, or hang up and call back a trusted number. The FTC says to contact a company using a phone number or website you know is real, not the information in the email.
- Paste the email into the checker at the top of this page for a second read.
- Send the email to emailwatch@discover.com. In Gmail you can also choose More next to Reply, then Report phishing.
Steps from Discover: Protect yourself against financial scams, read 9 November 2026.
Steps from FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 9 November 2026.
Steps from Gmail Help: Avoid & report phishing emails, read 9 November 2026.
If you think a Discover phishing email compromised your account, Discover says to call 1-800-DISCOVER right away.
Discover says to call 1-800-DISCOVER (1-800-347-2683) right away if you think your account security has been compromised because of a phishing email. Its article on reporting card fraud says to report suspected credit card fraud to your card issuer immediately, and that if you believe you are the victim of identity theft you should also contact the major credit bureaus and file a police report. Discover also says that scams involve transactions you have fully authorized, so your fraud protection options, if any, are limited.
What to do depends on what you did
You only read it.
Send it to emailwatch@discover.com.
You clicked or typed details.
If you think your account security has been compromised, call 1-800-DISCOVER (1-800-347-2683) right away.
You gave card or personal details.
Report it to your card issuer immediately. If you believe you are a victim of identity theft, also contact the major credit bureaus, file a police report and follow the steps at IdentityTheft.gov.
From Discover: Protect yourself against financial scams, read 9 November 2026.
From Discover: How to report credit card fraud, read 9 November 2026.
From FTC Consumer Advice: What To Do if You Were Scammed, read 9 November 2026.
From FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 9 November 2026.
The same checks work on other card emails.
A card alert can borrow the name of any issuer. The guide to fake Capital One emails covers a request to update payment details, the guide to fake Citi emails covers a threatening tone, and the guide to fake American Express emails covers an offer to pay your balance. The holiday scam emails guide puts the kinds side by side.
These are the questions people ask next.
How can I tell a real Discover email from a fake one?
Discover lists these signs of a phishing email: a suspicious email address from an unfamiliar sender, a generic name instead of your real name, an urgent message to scare you into action, odd or unfamiliar graphics, images or logos, and unusual or mismatched hyperlinks. It says to hover your mouse over a link first to see and verify the actual URL. Its page on cybercriminals says that if the sender of an email or text looks suspicious, you should not click the link or download any attachments.
Where do I report a fake Discover email?
Discover says to send the suspicious email to emailwatch@discover.com. If you think your account security has been compromised because of a phishing email, it says to call 1-800-DISCOVER (1-800-347-2683) right away. In Gmail you can also choose More next to Reply, then Report phishing.
Does Discover list the addresses it sends from?
No. The Discover pages we read do not list the addresses Discover sends from, and do not list what it will never ask for by email. They say that even if a phone number or email address looks legitimate it may not be, and that you can hang up and call back a trusted number or go to the company's trusted website.
What tactics does Discover say scammers use?
Discover lists three: urgency, where pressure to immediately transfer money or information is a red flag; emotional appeals; and requests for secrecy, which it says often come with questionable motives.
What if I clicked or gave my details?
Discover says that if you think your account security has been compromised because of a phishing email, you should call 1-800-DISCOVER (1-800-347-2683) right away. Its article on reporting card fraud says to report suspected credit card fraud to your card issuer immediately, and that if you believe you are the victim of identity theft you should also contact the major credit bureaus and file a police report.
Is a scam the same as fraud?
Discover says no: scams are theft of funds with your participation or permission, while fraud is financial theft without it. It says that because scams involve transactions you fully authorized, your fraud protection options, if any, are limited.
Every step on this page comes from these official pages.
Read on . Spot a step that has changed? Email support@batmail.ai and we will fix it.
- Discover: Protect yourself against financial scams
- Discover: Protect yourself against cybercriminals
- Discover: How to report credit card fraud
- FTC Consumer Advice: What To Do if You Were Scammed
- FTC Consumer Advice: How To Recognize and Avoid Phishing Scams
- IdentityTheft.gov
- Gmail Help: Avoid & report phishing emails