How to Check if an Email Is Legit (Warning Signs You Can Verify)
To check whether an email is legit, look at the sender's real domain, not the display name. Paste the From line, or better the full headers, into the email legitimacy checker and it lists the warning signs it finds: a domain that imitates a brand, a brand name on a free mailbox, a recently registered domain, a Reply-To on another domain and a failed DMARC check. Headers are read in your browser; only the domain is looked up on our server.
It gives signs, not a verdict. It never says a message is safe.
Step 1: get the real sender
The display name can say anything. Copy the full From line, with the name and address. For better results, copy the full headers: "Show original" in Gmail, "View source" in Outlook.
Step 2: paste it into the checker
Press Check for warning signs. Each sign appears with its reason. Looking at the domain by hand works too: read it letter by letter for swaps such as paypa1.com, and check whether a company name is sitting on a free mailbox like gmail.com.
Step 3: weigh the signs
| Sign | How strong | Why |
|---|---|---|
| Lookalike of a known brand's domain | Strong | Real companies send from their own domain |
| Brand name from a free mailbox | Strong | Anyone can open a free mailbox |
| Failed DMARC | Strong | The domain's owner did not authorise this sender |
| Domain registered days ago | Medium | New domains can be real, but scams use them. See checking how old a domain is |
| Reply-To on a different domain | Medium | Replies go somewhere other than the sender |
Whatever the result, never pay, share a code or log in from a link in the message. Go to the company's site or app yourself.
What a real address does not prove
A hacked genuine account passes every check here. And an address that exists is not a legit one: checking that a mailbox exists tells you it can receive mail, not who is behind it.
What this check cannot do
- It gives signals, not a verdict.
- Lookalikes are checked against about 35 commonly impersonated brands, not every company.
- It cannot see the message body, links or attachments; only the sender and headers.
- Hacked real accounts pass every check.
If you run a sign-up form
The same problem arrives from the other side: fake addresses on your list. Upload your sign-ups on the verify page: the first 100 email checks are free with a Google sign-in, no card. Disposable and non-existent addresses are marked ("Disposable address", "Mailbox not found"), and you remove them before they reach your list. See blocking disposable emails at signup and pricing.
Check a sender now
Paste it into the email legitimacy checker.
Common questions
How do I know if an email is real or a scam?
Check the sender's real domain for lookalikes, a brand name on a free mailbox, a very new domain and a failed DMARC. No single check proves it either way.
Can a scam come from a real company address?
Yes, if the account was hacked. That passes every technical check, so be wary of unexpected requests for money or codes from anyone.
Is it safe to reply to check if an email is real?
No. Contact the company through its own website or app instead.
Does the tool tell me an email is safe?
No. It lists warning signs it can see. Careful scams can show none.
What should I do with a phishing email?
Do not click or reply. Report it with your mail app's report phishing button and to the company being impersonated, then delete it.
Check your list before you send
Real mailbox checks over SMTP, and nothing is sent to the address. Sign in with Google and your first 100 email checks are free, no card. Plans for bigger lists are on the pricing page.