Email checker
Got an email from “your bank”, Absher or Aramex asking you to act fast? Paste it here. I check who really sent it, where its links really go, and the tricks scammers use — and the email never leaves your device.
How do I get the full source? (it makes the check much stronger)
- Gmail (computer): open the email → ⋮ → Show original → Copy to clipboard.
- Outlook: open the email → ⋯ → View → View message source.
- Apple Mail (Mac): View → Message → Raw Source.
- Yahoo Mail: ⋯ → View raw message.
- iPhone and Android mail apps can’t show the source. Paste the text you see, and type the sender’s address in the box above.
How it works
- 1Paste the emailOr its full source, for the strongest check.
- 2See who really sent itAnd where every link really goes.
- 3Decide safelyWhen in doubt, contact the company yourself — not through the email.
Is this email really from my bank?
Scam emails copy the look of a bank, Absher, Saudi Post or Amazon almost perfectly — the logo, the colours, even the signature. What they can’t copy is where they really come from and where their links really go. This checker looks at exactly those things, plus the pressure tricks scammers rely on.
When you paste the full source, it can also read the checks your own email provider already did — called SPF, DKIM and DMARC. If an email says it’s from your bank and passes DMARC for the bank’s real domain, it really came from them. If it fails, someone is pretending.
No checker can promise an email is safe. If something asks for a password, a code or money, contact the company yourself — by typing their address or calling the number on your card — not through the email.
For the technical folks
The message is parsed in the browser: headers are unfolded and RFC 2047 encoded words decoded; MIME parts are walked recursively with base64 and quoted-printable decoding and the declared charset. HTML parts go through DOMParser, which builds an inert document — nothing is fetched or run. The topmost Authentication-Results header is read for SPF, DKIM and DMARC. Links use the same rules and k-anonymous threat lookup as the Link Checker.
More tools