Free security tool · No sign-up
Not sure about an email? Forward it to us.
Send any suspicious email to our checker. In about a minute you'll get a reply saying whether it looks like a scam, with a link to the details. Rather check it yourself? Paste its headers below.
Forward suspicious emails to
We reply in about a minute with a verdict and a link to the full results.
Already clicked a link or typed your password? Change that password right away, from a different device if you can, and call us at (850) 250-5590. Prefer to check it yourself? Paste the headers below.
Or check it yourself: paste the headers
See who really sent an email, whether it passed the anti-fake checks (SPF, DKIM and DMARC) and the path it took. Everything stays in your browser.
Warning signs
The basics
The path it took
From the first server that handled it to your inbox.
All headers
Good to know
Questions people ask
How long does it take?
Usually under a minute. You'll get a reply from Flux Labs with a short verdict and a link to the full results.
Is it safe to forward a phishing email?
Yes. Forwarding doesn't open its links or attachments. Just don't click anything in it while you wait.
What do you check?
Who really sent it, whether the sender's address is made to look like a real company, where every link really goes (including links hidden in QR codes, pictures and PDF attachments), whether those websites were set up in the last few weeks, risky attachments, and the wording scammers use. If you forward it as an attachment, we also check the hidden sign-in results (SPF, DKIM and DMARC).
What happens to the email I forward?
Our email provider keeps it for a limited time so your results link works, and we use it only to run the check. Don't forward emails with passwords, bank details or patient information in them.
Why didn't I get a reply?
Check your junk folder. We only reply to the address that forwarded the email, and only when its own email system confirms the address is real, so nobody can use the check to send email to someone else.
Can my whole team use it?
Yes, and they should. Share the address, or ask us to add a Report phishing button to Outlook for everyone.
How do I find the headers in Outlook?
Open the email in its own window, then choose File, Properties and copy everything in the Internet headers box. In Outlook on the web or new Outlook, open the message, click the three dots, then View, View message details.
How do I find the headers in Gmail?
Open the email, click the three dots next to Reply and choose Show original. Click Copy to clipboard and paste it into the header check.
How do I find the headers on an iPhone or Mac?
On a Mac, open the email in Mail and choose View, Message, All Headers (or Raw Source). The iPhone Mail app can't show headers, so forward the email to us instead.
Are pasted headers sent anywhere?
No. Headers you paste are read inside your browser, on your own device. Nothing you paste is sent to us.
What are SPF, DKIM and DMARC?
They're checks the receiving email system runs to make sure an email really came from the company it claims to be from. A fail on these is a strong sign of a fake. You can check your own domain with our Email Security Check.
Tired of phishing emails getting through?
Book a free security check. We'll look at your email filtering and show your team how to spot the fakes.
More free tools: see them all