Free email scam checker — is this email a scam?
Paste the suspicious email below — ideally including the sender line — and get an instant verdict, free, no signup. The checker reads what the email says and asks for, and knows the phishing runs doing the rounds in Australia: fake myGov and ATO refunds, parcel-redelivery fees, bank “security alerts” and supplier invoice switches.
How the email check works
Scam emails follow scripts: an authority you trust, a reason to act right now, and a link or payment request that doesn't hold up. AI analysis reads the whole email you paste — the claimed sender, the tone, the ask, the links as written — and scores it against known Australian scam patterns. Include the sender's address if you can: it is one of the strongest signals there is.
The sender line gives most scams away
A display name is free text — “CommBank Security” can be typed by anyone. The address behind it is harder to fake, which is why phishing so often comes from a look-alike domain (commbank-alerts dot com) or a random webmail address. For businesses, the highest-cost version is the supplier invoice switch: an email that looks like your supplier, builder or conveyancer announcing “updated bank details”. Always verify a payment-detail change by phone, on a number you already have — never one in the email.
Your privacy
What you paste is sent securely to be analysed and is never shown to other users. Don't paste passwords, full card numbers, or one-time security codes — you never need to share those to check whether an email is a scam.
Frequently asked questions
How do I check if an email is a scam?
Copy the email — including the sender line if you can — and paste it above. The checker reads what the email says and asks for, and scores it against known Australian phishing and invoice-fraud patterns. You get a trust score, a verdict and the specific red flags found.
What does a mismatched sender address mean?
The display name on an email is free text — anyone can call themselves "Australia Post". The address behind it is harder to fake, so a display name that doesn't match its address (like a bank emailing from a random webmail or a look-alike domain) is one of the strongest phishing signals there is.
Can it check invoice or payment-change emails?
Yes — paste the whole email. Business email compromise (an "updated bank details" email that looks like it's from a supplier, a tradie or a conveyancer) is one of the most expensive scams in Australia. Always verify changed payment details by phoning the business on a number you already have, never one from the email.
Is it safe to paste a suspicious email here?
Yes. Pasting text is harmless — danger comes from clicking links, opening attachments or replying. What you paste is analysed securely and never shown to anyone else. Leave out anything you'd rather not share; the red flags usually survive trimming.
Just a suspicious link rather than a whole email? The link checker reads the destination for you. Already clicked or replied? Here's exactly what to do now.