Verify Email — How to Spot Fake Emails & Phishing
Phishing is the #1 cyber threat in 2026. Learn how to verify an email's authenticity, detect malicious links, and protect your personal data from fraudsters.
5 steps to verify any email
1. Check the sender address
Look at the full email address, not just the display name. Scammers use slight variations like support@amaz0n.com instead of support@amazon.com.
2. Hover over links
On desktop, hover your mouse over links without clicking. The real URL appears at the bottom of your browser. On mobile, long-press the link to preview it.
3. Watch for urgency and threats
Phishing emails often create false urgency: "Your account will be suspended in 24 hours." Real companies give you time and communicate through multiple channels.
4. Inspect attachments
Be cautious with .exe, .zip, .js, and Office documents with macros enabled (.docm, .xlsm). Never enable macros unless you explicitly requested the document.
5. Verify independently
If an email claims to be from your bank, log in through your official app or website — never through the email link. When in doubt, call the company using their official number.
Free tools to verify emails
Header analysis
Analyze the full email headers to verify the sending server and detect spoofing.
DNS check
Verify SPF, DMARC, and DKIM records of the sender's domain to confirm legitimacy.
Breach check
Check if your email was compromised in a known data breach using Have I Been Pwned.
Email verification — Frequently asked questions
Verify the sender's full email address, hover over links without clicking, look for spelling errors, and be wary of urgent requests. Legitimate organizations never ask for passwords or banking details by email.
Use Have I Been Pwned (haveibeenpwned.com) to check if your address appears in known data breaches. If it has, change your password immediately and enable two-factor authentication.
Phishing is a scam where attackers impersonate trusted organizations to steal personal data. Smishing uses text messages, vishing uses phone calls, and spear phishing targets specific individuals.
Simply opening an email is generally safe on modern email clients. The danger comes from clicking links, downloading attachments, or enabling macros in documents.
Disconnect from the internet, run an antivirus scan, change your passwords from a different device, and monitor your bank accounts. Report the phishing attempt to your email provider.
See also: reverse phone lookup
Clairmo specialises in reverse phone lookup. Discover the service for verifying a phone number.
Check a phone number