Free tool, no signup
Free phishing email checker
Paste a suspicious email. Get a verdict, the exact red flags found in it, and what to do next.
Questions
What people ask
The answers worth having before, and after, you use the tool.
How can I tell if an email is phishing?
Check the sender's real address, not the display name. Hover a link and read where it actually goes. Look for urgency, a threat, an unexpected attachment, or a request for a password, code or payment. Any one of those is worth a pause; two together is usually a scam.
I clicked a link in a phishing email. What now?
If you only opened the page and typed nothing, close it and run a malware scan. If you entered a password, change it now on the real site and anywhere you reused it, then turn on two-factor authentication. If you entered card or bank details, call your bank.
Where do I report a phishing email?
In Gmail, open the three-dot menu on the message and choose Report phishing. In Outlook, use Report, then Phishing. In the US you can forward it to reportphishing@apwg.org; in the UK, to report@phishing.gov.uk. Report it to the brand it is impersonating too.
Is it safe to paste an email here?
Paste the text of the message, never your password or a one-time code. The text is sent to the AI model that scores it and is not stored on our servers or used to train anything. Do not open attachments to copy them; you do not need them for the check.
Can a checker be wrong?
Yes, in both directions. This is a second opinion, not a verdict from your bank. A clean result on a message asking for money or credentials still deserves a phone call to the sender on a number you already had.
This tool handles one email. Batmail handles the rest.
One suspicious email is a copy and paste. A hundred a week is a job. Batmail reads every message that lands overnight and flags the ones that do not add up, with the reason written down.
More free tools
Other things you can do here
All free, all without an account.