The checker reads one suspicious email. Batmail reads your whole inbox overnight.
Paste the Navy Federal email into the checker and it reads it for the signs below.
The checker reads the sender address, the wording, any link address you paste with the email and what the email asks you to do. It gives a verdict, a risk score from 0 to 100, the exact wording behind each red flag and what to do next. It is free and needs no signup.
Batmail phishing email checker
Read the sender's address from the right, because the last two parts say who owns it.
Anyone can put “Navy Federal” in front of an address. The part to read is the domain, after the @ in a sender or after the https:// in a link. Read it from the right: the last two parts name the owner, and everything in front of them is only a label the owner chose. Navy Federal’s page on phishing scams is at www.navyfederal.org, and the owner of that address is navyfederal.org. The page we read does not list the addresses Navy Federal sends from, so the rule here is the one every address follows.
Read the domain from the right
www.navyfederal.org
From Navy FederalOwned by navyfederal.org. This is the address of Navy Federal's own page on phishing scams.
navyfederal.org.member-hold.example
Not from Navy FederalOwned by member-hold.example. navyfederal.org is only a label in front of it.
navyfed-member-desk.example
Not from Navy FederalOwned by navyfed-member-desk.example. The name has Navy Fed in it, but the owner is someone else.
From Navy Federal Credit Union: Phishing scams, read 9 November 2026.
Navy Federal says to forward a phishing email to phishalert@navyfederal.org and to call at any hour if you gave information.
Navy Federal gives one address for an email, another for a call or text, and a number that answers 24 hours a day. It also says its real texts come from short codes, which are unique 5 to 6 digit numbers only its system uses, such as 20270 for credit card fraud alerts and 35038 for security alerts.
How to report a fake Navy Federal message
- Forward the email
To phishalert@navyfederal.org.
Navy Federal says to include the original subject line and the name of your Internet Service Provider in the body.
- Report a call or text
To reportabuse@navyfederal.org.
Navy Federal says to include the time and date, the number it came from and what was requested, and no personal account information.
- Call if you gave information
1-888-842-6328, 24 hours a day.
Navy Federal says to stop all contact with the suspected scammer and call it at any hour.
From Navy Federal Credit Union: Phishing scams, read 9 November 2026.
Five steps tell you whether a Navy Federal email is real without clicking anything.
- Leave the button and every link alone. Navy Federal lists suspicious links, QR codes and unexpected attachments among the clues in an email.
- Read the sender’s actual address from the right, as in the picture above. Navy Federal lists mismatched email addresses as a clue.
- Check your account by opening Navy Federal’s app or site yourself. The FTC says to contact a company using a phone number or website you know is real, not the information in the email.
- Paste the email into the checker at the top of this page for a second read.
- Forward the email to phishalert@navyfederal.org with the original subject line and your Internet Service Provider’s name. In Gmail you can also choose More next to Reply, then Report phishing.
Steps from Navy Federal Credit Union: Phishing scams, read 9 November 2026.
Steps from FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 9 November 2026.
Steps from Gmail Help: Avoid & report phishing emails, read 9 November 2026.
If you gave information to a scammer, Navy Federal says to stop contact and call 1-888-842-6328.
Navy Federal says that if you supplied personal information by email, phone, social media or other means to someone you suspect was scamming you, you should stop all contact with them and call Navy Federal 24 hours a day at 1-888-842-6328. It also says to make sure your computer’s firewall, anti-virus and spyware software are current, run a virus scan, change your online banking password and username from an uninfected computer, and change your mobile password or enable touch ID.
What to do depends on what you did
You only read it.
Forward it to phishalert@navyfederal.org with the original subject line and your Internet Service Provider's name.
You clicked.
Make sure your computer's firewall, anti-virus and spyware software are current, and run a virus scan to clean up any viruses or Trojans.
You gave information.
Stop all contact and call Navy Federal at 1-888-842-6328. Change your online banking password and username from an uninfected computer, then follow the steps at IdentityTheft.gov for what you shared.
From Navy Federal Credit Union: Phishing scams, read 9 November 2026.
From FTC Consumer Advice: What To Do if You Were Scammed, read 9 November 2026.
From FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 9 November 2026.
The same checks work on other bank and credit union emails.
An account hold can borrow the name of any lender. The guide to fake USAA emails covers a call for your one-time code, the guide to fake Chase emails covers a call to move your money, and the guide to fake Capital One emails covers a request to update payment details. The holiday scam emails guide puts the kinds side by side.
These are the questions people ask next.
What does Navy Federal say it will never do?
Navy Federal says it will never solicit your personal information over the phone or through text, email or social media. It says legitimate businesses won't ask for personal information via email or send links to update payment methods.
How can I tell a real Navy Federal email from a fake one?
Navy Federal lists these email clues: unfamiliar senders, mismatched email addresses, urgent language, suspicious links, QR codes, unexpected attachments, typos and grammatical errors, offers that are too good to be true, and an inconsistent look and feel to the brand. Its red flags also include generic greetings like "Hello Customer", threats, first-time senders, an unexpected invoice, offers for free stuff or refunds, and a notice that a service is expiring or an account is on hold because of billing problems.
Does a message that uses my name mean it is real?
No. Navy Federal says scammers are using artificial intelligence to improve their messages, which means fewer of the mistakes that made fakes easier to spot, and that even a message that addresses you by name doesn't mean it's legitimate.
Where do I report a fake Navy Federal email?
Navy Federal says to forward the message to phishalert@navyfederal.org with the original subject line and the name of your Internet Service Provider in the body. For a phone call or a text it says to email reportabuse@navyfederal.org with the time and date, the number it came from and what was requested, and not to include personal account information in the email.
How do I know a text is from Navy Federal?
Navy Federal says its texts come from short codes, which are unique 5 to 6 digit numbers only its system uses, and its page lists them. For example, it lists 20270 for credit card fraud alerts and 35038 for security alerts.
What if I gave my information to a scammer?
Navy Federal says to stop all contact with the suspected scammer and contact it 24 hours a day at 1-888-842-6328. It also says to make sure your firewall, anti-virus and spyware software are current, run a virus scan, change your online banking password and username from an uninfected computer, and change your mobile password or enable touch ID.
Every step on this page comes from these official pages.
Read on . Spot a step that has changed? Email support@batmail.ai and we will fix it.