Is this email real? Check who really sent it
An email can show any name in “From”. What’s much harder to fake is what your email provider checks when it receives it. Paste the message headers here and we’ll tell you whether the sender is who they claim to be. Nothing is sent or stored.
How to copy the headers
- Gmail: open the email, tap the three dots and choose “Show original”. Copy all the text.
- Outlook: open the email, click the three dots, “View” and “View message source” or “Message details”.
- Apple Mail: open the email and choose “View”, “Message” and “Raw Source”.
- Yahoo Mail: open the email, click “More” and “View raw message”.
Related tools
Which countries it covers
Works with emails from any country and in any language: it reads the SPF, DKIM and DMARC check your own provider (Gmail, Outlook, Yahoo, iCloud and others) records in the headers when it receives the message, and checks the sender’s name and domain with NoCall’s brand rules for this edition.
Checked in your browser: the headers are never sent or stored, and the result only shows domains, never full addresses.
Frequently asked questions
What are SPF, DKIM and DMARC?
They’re the checks your email provider runs when it receives an email: SPF checks whether the sending server is authorised, DKIM verifies a signature from the domain and DMARC confirms everything matches the domain you see in “From”. If DMARC fails, the sender is fake.
If the sender is verified, is the email safe?
Not always. Verified means it comes from that domain, but a scammer can use their own domain that looks like a brand’s, or a hacked account. Also look at the domain shown and stay wary of any request for details or payments.
Why isn’t the sender’s name enough?
Because the display name is written by whoever sends the email and can say anything, even your bank’s name or a fake address in quotes. What counts is the verified domain.