Email Security

Verify Email — How to Spot Fake Emails & Phishing

Phishing is the #1 cyber threat in 2026. Learn how to verify an email's authenticity, detect malicious links, and protect your personal data from fraudsters.

5 steps to verify any email

1. Check the sender address

Look at the full email address, not just the display name. Scammers use slight variations like support@amaz0n.com instead of support@amazon.com.

2. Hover over links

On desktop, hover your mouse over links without clicking. The real URL appears at the bottom of your browser. On mobile, long-press the link to preview it.

3. Watch for urgency and threats

Phishing emails often create false urgency: "Your account will be suspended in 24 hours." Real companies give you time and communicate through multiple channels.

4. Inspect attachments

Be cautious with .exe, .zip, .js, and Office documents with macros enabled (.docm, .xlsm). Never enable macros unless you explicitly requested the document.

5. Verify independently

If an email claims to be from your bank, log in through your official app or website — never through the email link. When in doubt, call the company using their official number.

Free tools to verify emails

Header analysis

Analyze the full email headers to verify the sending server and detect spoofing.

DNS check

Verify SPF, DMARC, and DKIM records of the sender's domain to confirm legitimacy.

Breach check

Check if your email was compromised in a known data breach using Have I Been Pwned.

Email verification — Frequently asked questions

Verify the sender's full email address, hover over links without clicking, look for spelling errors, and be wary of urgent requests. Legitimate organizations never ask for passwords or banking details by email.

Verify an email now

Clairmo analyzes DNS records, breach databases, and public profiles associated with any email address.

Verify an email
Verify Email — How to Check If an Email Is Legitimate [2026] | Clairmo