Free phishing and spam email checker
Is this email spam or phishing?
A free tool by Przemysław Zalewski, an independent engineer who builds email systems.
Forward the email to your check address or upload the .eml file. You get a plain verdict from three AI models plus checks of the sender, the links and the signatures.
Free · no sign-up · deleted after 24 hours · we never open links from your email
How it works
- Get an address. Click the button. You get a private address like check+k7f2q9mx@ciunkos.com for 24 hours.
- Forward the email. Forward the suspicious email to it, ideally as an attachment, or upload the .eml file.
- Read the verdict. Three AI models judge the text, the links and a screenshot, and our checks look at the sender and signatures.
What we look at
Three AI models
Claude Haiku (Anthropic), Clef (Cloudflare) and Llama 4 Scout (Meta) each give a verdict: normal, marketing, suspicious, spam or phishing. We show each vote and the reasons.
The sender
Whether the From domain really signed the email (DKIM), whether it passes DMARC, and look-alike domains such as paypa1 instead of paypal.
The links
Links whose visible text shows a different address than where they lead, link shorteners and scripts. We list the links but never open them.
How it looks
A safe screenshot and preview: no scripts, images through our proxy, so the sender does not see your IP address.
How to spot phishing yourself
- Pressure and threats: "within 24 hours", "your account will be closed", "final notice".
- A request for a password, a code, card details or a payment to a new account number.
- The sender name says one brand, but the address after @ is a different or misspelled domain.
- Hover over a link: the address in the corner of the browser differs from the text.
- Unexpected attachments, especially .zip, .html or Office files that ask to enable macros.
Report it: forward phishing to reportphishing@apwg.org (Anti-Phishing Working Group); in the UK also to report@phishing.gov.uk; in the US at reportfraud.ftc.gov. If it pretends to be your bank or a shop, contact them through their official app or website, never through links in the email.
Questions about the phishing checker
Is it safe to forward a phishing email here?
Yes. Forwarding does not run anything. We never open the links from your email, we load its images through our proxy, and the email is deleted after 24 hours.
Who sees my email?
Only people with the report link. To judge it, the text, the list of links and a screenshot are sent to AI models run by Cloudflare (Clef, Llama) and to Claude through Cloudflare, under their API terms, which exclude training on API data. Do not send emails with passwords, medical or banking details you would not show anyone.
Can the AI be wrong?
Yes. That is why three different models vote, and why we show the technical checks next to them. Treat the verdict as a second opinion; when in doubt, contact the company through its official website or app.
What should I do if I already clicked?
If you typed a password, change it now (and everywhere you reused it) and turn on two-step login. If you gave card details, call your bank using the number on your card. If you opened an attachment, run an antivirus scan.
I send newsletters. Is this for me?
Use the sender test: it checks one-click unsubscribe, SPF, DKIM, DMARC and the Gmail and Yahoo rules, and the same AI panel tells you how your email reads to filters and people.
Is someone sending emails in your company's name?
I set up SPF, DKIM and DMARC so receivers reject fake emails from your domain, and set up your own sending to meet the Gmail and Yahoo rules.
