How to check if an email is legit or phishing?


Editorial team Published on

You can analyze raw message details using the PowerDMARC Phishing Email Checker to verify email security records and detect spoofing attempts.

Checking whether an email is safe from phishing requires inspecting both sender details and technical authentication. Use these key steps to verify an email:

Check the Sender Address

  • Examine the full address: Look past the display name to see the actual email address. Scammers often use a legitimate-looking name with an unrelated or free webmail domain.
  • Watch for typos (typosquatting): Check for subtle misspellings in the domain name, like g00gle.com instead of google.com.

Inspect Links and Attachments

  • Hover without clicking: Place your mouse cursor over any link to preview the actual destination URL in a tooltip or browser status bar.
  • Verify destination match: Ensure the previewed web address matches the official domain of the company. If it leads to an unfamiliar or lookalike site, it is likely a scam.
  • Avoid unexpected files: Do not open attachments from unknown senders, as they can install malware.

Look for Red Flags

  • Urgent or threatening language: Phishing messages often try to induce panic by claiming your account will be closed or compromised unless you act immediately.
  • Generic greetings: Legitimate organizations usually address you by your name, whereas scams often use generic greetings like "Dear Customer" or "Dear Account Holder".

Verify via Independent Channels

  • Go direct: If an email claims there is a security problem with an account, do not use the links or phone numbers provided in the message.
  • Log in manually: Open a fresh browser window, type the official website address yourself, and check your account status there. For more guidance, review the FTC Consumer Advice on Phishing Scams or Microsoft's Phishing Protection Guide.