The checker reads one suspicious email. Batmail reads your whole inbox overnight.
Paste the Target email into the checker and it reads it for the signs below.
The checker reads the sender address, the wording, any link address you paste with the email and what the email asks you to do. It gives a verdict, a risk score from 0 to 100, the exact wording behind each red flag and what to do next. It is free and needs no signup.
Batmail phishing email checker
A fake Target email thanks you for an order you never placed and tells you to call to cancel it.
Target’s security page on popular fraud tactics describes the fake order scam, and its holiday tips list the red flags to look for. The email below is invented, and each number is one of the signs.
Example
Hello customer,
Thank you for your recent purchase. Order 0000000000: 1 x 65-inch TV, $649.99.
Did not place this order? Call 1-800-555-0142 and give your Target account password so we can cancel it.
Your card will be charged in 24 hours unless you cancel.
The button says target.com/orders
The sender's address is slightly off.
Target says emails usually come from a slightly "off" address that differs from the company's official handle, and that misspelled contacts and brand names, typos and bad grammar are big red flags.
A thank you for a purchase you did not make.
Target describes a fraudster who creates a fake "thank you for your recent purchase" email or text from Target.
A phone number to call and a request for your password.
Target says the goal is to trick you into reporting that you did not place the order using a phone number or link in the message, after which the scammer tries to collect your login credentials, payment information or other personal details.
Pressure to act within 24 hours.
Target lists pressure to take quick action among the warning signs of a scam call, and says to slow down and be on the lookout for red flags in every email and text.
A button that says target.com and goes somewhere else.
Target says to hover over a link to see the full URL, and not to click if you're not sure. It also says scammers create fake websites that look like Target.com.
From Target Security & Fraud: Popular fraud tactics and scams, read 9 November 2026.
From Target: 7 scam-busting tips for the holidays, read 9 November 2026.
Read the sender's address from the right, because the last two parts say who owns it.
Anyone can put “Target” in front of an address. The part to read is the domain, after the @ in a sender or after the https:// in a link. Read it from the right: the last two parts name the owner, and everything in front of them is only a label the owner chose. Target’s security page is at security.target.com, and the owner of that address is target.com. The Target pages we read do not list the addresses Target sends from, so the rule here is the one every address follows.
Read the domain from the right
security.target.com
From TargetOwned by target.com. This is the address of Target's own page on popular fraud tactics and scams.
target.com.order-cancel.example
Not from TargetOwned by order-cancel.example. target.com is only a label in front of it.
target-order-help.example
Not from TargetOwned by target-order-help.example. The name has Target in it, but the owner is someone else.
From Target: 7 scam-busting tips for the holidays, read 9 November 2026.
Target describes the fake order scam and says it would never call to ask for your one-time password or PIN.
Target’s pages describe how its name is used in scams and give short tips for emails and texts. A fake order email breaks at least one of them.
| Question | What Target says | What a fake order email does |
|---|---|---|
| What is the fake Target order scam? | What Target saysTarget describes a fake "thank you for your recent purchase" email or text, meant to make you report an order you did not place and then give up your login, payment or personal details. | What a fake order email doesThanks you for a TV you never bought and tells you to call. |
| Which address does a real email come from? | What Target saysTarget says emails usually come from a slightly "off" address that differs from the company's official handle, and misspelled contacts and brand names, typos and bad grammar are big red flags. | What a fake order email doesComes from an address that has Target in its name and someone else's domain. |
| What will Target never ask for? | What Target saysTarget says it would never call a guest to ask for their one-time password, PIN, Target Circle Card number or gift card numbers. | What a fake order email doesAsks you to call and read out your account password. |
| What should I do with a link? | What Target saysTarget says to hover over a link to see the full URL, and if you're not sure it's safe, not to click it and to use a web browser to go to the brand's trusted website instead. | What a fake order email doesA button that says target.com and opens a fake sign-in page. |
| What do fake Target job offers look like? | What Target saysTarget says job scams arrive by email posing as Target, with a subject line such as "job offer" or "influencer opportunities", and ask for personal information, gift card numbers or purchases to review. | What a fake order email doesA different lure with the same goal of getting your details. |
From Target Security & Fraud: Popular fraud tactics and scams, read 9 November 2026.
From Target: 7 scam-busting tips for the holidays, read 9 November 2026.
Target says to report a suspicious email to abuse@target.com and to hang up on a call that asks for your card details.
Target gives one email address for a suspicious email, text, call or website, and lists what to do if someone calls pretending to be its fraud department.
What to do with a message that says it is from Target
- Report the email
To abuse@target.com.
Target says to get in touch if you receive a suspicious email, text, phone call or malicious website that appears to be from Target.
- Hang up on a fake call
Do not share personal information.
Target says to hang up immediately, not share personal information, report the call and monitor your accounts.
- Go to Target yourself
In a browser, or in the Target app.
Target says to use a web browser to navigate to the brand's trusted website instead of clicking a link, and that you can use the Target app to shop safely.
From Target Help: Contact us about security concerns, read 9 November 2026.
From Target Security & Fraud: Popular fraud tactics and scams, read 9 November 2026.
Five steps tell you whether a Target email is real without clicking anything.
- Leave the button and every link alone. Target says to hover over a link to see the full URL, and not to click if you’re not sure it’s safe.
- Read the sender’s actual address from the right, as in the picture above. Target says a slightly “off” address is a common sign.
- Check your orders by opening the Target app or website yourself. Target says to use a web browser to go to the brand’s trusted website, and the FTC says to contact a company using a phone number or website you know is real, not the information in the email.
- Paste the email into the checker at the top of this page for a second read.
- Report it to abuse@target.com. In Gmail you can also choose More next to Reply, then Report phishing.
Steps from Target: 7 scam-busting tips for the holidays, read 9 November 2026.
Steps from FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 9 November 2026.
Steps from Gmail Help: Avoid & report phishing emails, read 9 November 2026.
If you were scammed, Target says to report it to local law enforcement and to the FBI's IC3 or the FTC.
Target’s cybersecurity expert says to report the incident as soon as you can to your local law enforcement and to the Internet Crime Complaint Center or the Federal Trade Commission, even if you feel silly, because it can happen to anyone. The Target pages we read give no steps for a click on its own. For a call from someone who says they are Target’s fraud department, Target says to hang up immediately, not share personal information, report the call and monitor your accounts.
What to do depends on what you did
You only read it.
Report it to abuse@target.com.
You clicked or called the number.
Target's pages give no steps for a click on its own. For a call, Target says to hang up immediately, not share personal information, report the call and monitor your accounts.
You gave details.
Report it to local law enforcement and to the Internet Crime Complaint Center or the FTC as soon as you can, then follow the steps at IdentityTheft.gov for what you shared.
From Target: 7 scam-busting tips for the holidays, read 9 November 2026.
From Target Security & Fraud: Popular fraud tactics and scams, read 9 November 2026.
From FTC Consumer Advice: What To Do if You Were Scammed, read 9 November 2026.
From FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 9 November 2026.
The same checks work on other store order emails.
An order email can borrow the name of any store. The guide to fake Walmart emails covers a prize email, the guide to fake Costco emails covers a failed membership payment, and the guide to fake Amazon order emails covers an order that is not in Your Orders. The holiday scam emails guide puts the kinds side by side.
These are the questions people ask next.
What is the fake Target order scam?
Target describes a fraudster who creates a fake "thank you for your recent purchase" email or text from Target. The goal is to trick you into reporting that you did not place the order, using a phone number or link in the message. Target says the scammer will then try to collect your login credentials, payment information or other personal details.
How can I tell a real Target email from a fake one?
Target's cybersecurity expert says emails usually come from a slightly "off" address that differs from the company's official handle, and that misspelled contacts and brand names, typos and bad grammar are big red flags. Target says to hover over a link to see the full URL, and to use a web browser to go to the brand's website on your own. The Target pages we read do not list the addresses Target sends from.
What does Target say it would never ask for?
Target says it would never call a guest to ask for their one-time password, PIN, Target Circle Card number or gift card numbers. For calls from someone who says they are Target's fraud department, it says to hang up immediately, not share personal information, report the call and monitor your accounts.
Where do I report a fake Target email?
Target says to get in touch if you believe you received a suspicious email, text, phone call or malicious website that appears to be from Target. Its email address for this is abuse@target.com. In Gmail you can also choose More next to Reply, then Report phishing.
What do fake Target job offers look like?
Target says job scams often arrive by email posing as Target, with a subject line such as "job offer" or "influencer opportunities". It says victims are told to share personal information, buy and share gift card numbers, or buy certain items to review.
What if I was scammed?
Target's cybersecurity expert says to report the incident as soon as you can to your local law enforcement and to the Internet Crime Complaint Center or the Federal Trade Commission. The Target pages we read give no steps for a click on its own.
Every step on this page comes from these official pages.
Read on . Spot a step that has changed? Email support@batmail.ai and we will fix it.
- Target Security & Fraud: Popular fraud tactics and scams
- Target Help: Contact us about security concerns
- Target: 7 scam-busting tips for the holidays
- FTC Consumer Advice: What To Do if You Were Scammed
- FTC Consumer Advice: How To Recognize and Avoid Phishing Scams
- IdentityTheft.gov
- Gmail Help: Avoid & report phishing emails