How to Check if an Email is Phishing (Free Tools & Methods)

What is Phishing? A Quick Recap

Phishing is a type of cyberattack where criminals impersonate a trusted entity — a bank, a delivery company, your boss, or a tech platform — to trick you into revealing passwords, clicking malicious links, or transferring money.

Modern phishing emails are sophisticated. With AI tools like ChatGPT, attackers can write grammatically perfect, personalized emails that are nearly indistinguishable from the real thing. That's why you need a systematic approach to verify them.

Method 1: Use a Free Phishing Email Scanner (Fastest)

The quickest way to check if an email is phishing is to use an automated scanner. Phishing Inspector is a free AI-powered tool that analyzes emails in seconds using:

• Google Safe Browsing — checks all links against Google's database of known phishing and malware URLs
• VirusTotal — scans every URL through 70+ security engines simultaneously
• AI language models — detects social engineering language, urgency tactics, and impersonation patterns
• SPF, DKIM, DMARC authentication — verifies the email actually came from the claimed domain

Method 2: Check the Sender's Email Address

This is the most basic — but frequently overlooked — check. Phishers use two main tricks:

How to check: In Gmail, click the sender name. In Outlook, hover over the name. In Apple Mail, click the arrow next to the sender.

Method 3: Inspect Every Link Before Clicking

Never click a link in a suspicious email before checking where it goes. Here is how:

1. Hover over the link — your browser or email client will show the actual destination URL in the status bar. Does it match what the text says?
2. Copy the URL and check it on VirusTotal — go to virustotal.com, paste the URL, and see if any security engines flag it.
3. Use our scanner — paste the full email and we check every URL automatically against 70+ engines.

Method 4: Check Email Authentication Headers (SPF, DKIM, DMARC)

Email authentication is the technical backbone of anti-spoofing. When an email fails these checks, it means the sender is not who they claim to be.

To check these headers manually, open the email's raw source. In Gmail: "Show Original". In Outlook: "View Message Source". Or just paste the full email into our free tool and we parse all headers automatically.

Method 5: Look for Social Engineering Red Flags

Phishing emails are designed to make you act without thinking. Common manipulation tactics include:

• False urgency: "Your account will be suspended in 24 hours" — this is designed to bypass your critical thinking.
• Fear and threats: "Unusual activity detected on your account" or "Legal action will be taken".
• Too-good-to-be-true offers: Prize winners, unexpected refunds, inheritance emails.
• Request for credentials: Legitimate companies never ask for passwords over email.
• Generic greetings: "Dear Customer" instead of your real name — often a sign of mass-sent phishing.

Phishing Check Checklist