Phishing check

Is this email a scam? Check it in one click

Click Check sender on the email. Fromensics answers in one line with what to do, and lists every reason under How we know.

What you’ll see

Don’t pay

Don’t sign in from this email.

Report phishing in Gmail

Uses Gmail’s own report button. The sender isn’t told.

When you see it: the checks found strong scam signs and the email asks you to log in.

Don’t pay

Don’t reply or send anything.

Report phishing in Gmail

When you see it: the checks found strong scam signs, but the email doesn’t ask for money or a login yet. Many scams start with a harmless-looking first message.

Check first

Check before you reply.

Jordan says they’re from Brightline Media but writes from brightline-media.example, which doesn’t match that name. We haven’t checked how new that domain is.

Check onceAlways check

We’ll look up when it was registered and how its mail is set up. Only the domain name is sent, never the email.

When you see it: something needs a second look, like a company name that doesn’t match the address, a very new domain, or a link that goes somewhere other than it says.

Nothing looks off

Nothing looks off.

The checks that ran found nothing wrong, and it doesn’t ask for money or a login.

Add Alice to trusted senders

We’ll warn you if someone ever imitates this address.

When you see it: none of the checks found a warning sign. Fromensics never calls an email “safe”: it tells you what it checked, and what it couldn’t.

How we know

Every report has a How we know row. It opens a sheet that starts with a count, for example “2 reasons this looks wrong. 14 things checked on this device.”, then groups the reasons:

Who sent it: Imitates one of your trusted senders · Names a company its address doesn’t match · a match on the Fromensics threat list.
What it asks: Says the bank details changed · Pressure to act now · Asks for a password or payment details.
What we checked: the checks that passed, and the ones that couldn’t run, marked as not checked.

From the sheet you can look up the domain once, add the message headers to check SPF, DKIM and DMARC, or see the full score under Technical details.

Report it

In Gmail, Report phishing in Gmail uses Gmail’s own report button. If Gmail asks you to confirm the report, confirm it there. If the button can’t reach it, open ⋮ on the message and choose Report phishing. In Outlook, use Outlook’s own Report phishing.

Questions

Does Fromensics say an email is safe?

No. Nothing looks off means the checks that ran found nothing wrong. How we know lists what was checked and what wasn’t.

Does AI decide the answer?

No. Rules in code decide it. Chrome’s on-device AI can explain the answer and answer questions, but it can’t change it. See on-device AI.

Is it free?

Yes. Checking emails is free, with no account. Pro adds deeper online checks.

Spot a lookalike addressAddresses one letter or word away from someone you trust.Check a domain’s ageLook up one domain, only when you say so.SPF, DKIM and DMARCRead an email’s authentication results from its headers.