Phishing email analyzer
Analyze email addresses and content to detect phishing attempts and learn how to identify fraudulent emails
Email Analysis Tool
Expert Tips: How to Detect Phishing Emails
Red Flags to Watch For
Urgency and Pressure Tactics
Phishers often create false urgency with phrases like "act now," "your account will be closed," or "limited time offer." Legitimate organizations rarely pressure you to act immediately.
Generic Greetings
Legitimate emails from companies you do business with will usually address you by name. Be suspicious of "Dear Customer" or "Dear User" greetings.
Suspicious Links
Hover over links (without clicking) to see the actual destination. Watch for shortened URLs (bit.ly, tinyurl), misspelled domains, or links that don't match the displayed text.
Requests for Sensitive Information
Legitimate companies will never ask for passwords, Social Security numbers, credit card numbers, or PINs via email. This is a major red flag.
Poor Grammar and Spelling
Professional organizations have quality control. Multiple spelling errors, poor grammar, or awkward phrasing are common in phishing emails.
Suspicious Sender Addresses
Check the sender's email address carefully. Look for misspellings (gmai1.com instead of gmail.com), random numbers, or domains that don't match the organization.
What to Do If You Receive a Suspicious Email
Verify Independently
If an email claims to be from a company, contact them directly using official contact information from their website (not from the email). Never use contact details provided in a suspicious email.
Check the Sender
Examine the sender's email address carefully. Legitimate emails from organizations will come from their official domain. Be wary of free email services claiming to be from businesses.
Inspect Links Before Clicking
Hover over links to see the actual URL. If it looks suspicious or doesn't match what you expect, don't click. Type the organization's website address directly into your browser instead.
Report Phishing Attempts
Report phishing emails to your email provider and the organization being impersonated. Many companies have dedicated email addresses for reporting phishing attempts.
Delete Suspicious Emails
When in doubt, delete the email. It's better to be safe than sorry. If it's legitimate, the organization will find another way to contact you.
What NOT to Do
Never Click Suspicious Links
Even if you're curious, don't click links in suspicious emails. They may lead to malicious websites that can infect your device or steal your information.
Never Download Attachments
Unexpected attachments, especially from unknown senders, can contain malware. Only open attachments you're expecting and have verified the sender.
Never Provide Personal Information
Legitimate organizations will never ask for passwords, Social Security numbers, credit card details, or other sensitive information via email.
Don't Reply to Suspicious Emails
Replying confirms that your email address is active, which can lead to more phishing attempts. Simply delete the email.
Don't Trust the Display Name
Email display names can be easily spoofed. Always check the actual email address, not just the name that appears in your inbox.