Verify Email — How to Spot Fake Emails & Phishing
Phishing is the #1 cyber threat in 2026. Learn how to verify an email's authenticity, detect malicious links, and protect your personal data from fraudsters.
5 steps to verify any email
1. Check the sender address
Look at the full email address, not just the display name. Scammers use slight variations like support@amaz0n.com instead of support@amazon.com.
2. Hover over links
On desktop, hover your mouse over links without clicking. The real URL appears at the bottom of your browser. On mobile, long-press the link to preview it.
3. Watch for urgency and threats
Phishing emails often create false urgency: "Your account will be suspended in 24 hours." Real companies give you time and communicate through multiple channels.
4. Inspect attachments
Be cautious with .exe, .zip, .js, and Office documents with macros enabled (.docm, .xlsm). Never enable macros unless you explicitly requested the document.
5. Verify independently
If an email claims to be from your bank, log in through your official app or website — never through the email link. When in doubt, call the company using their official number.
Free tools to verify emails
Header analysis
Analyze the full email headers to verify the sending server and detect spoofing.
DNS check
Verify SPF, DMARC, and DKIM records of the sender's domain to confirm legitimacy.
Breach check
Check if your email was compromised in a known data breach using Have I Been Pwned.
Email verification — Frequently asked questions
Verify the sender's full email address, hover over links without clicking, look for spelling errors, and be wary of urgent requests. Legitimate organizations never ask for passwords or banking details by email.
See also: reverse phone lookup
Clairmo specialises in reverse phone lookup. Discover the service for verifying a phone number.
Check a phone number