Is This Mail Real?Bring the suspicious bit.
Paste the message or upload a screenshot. Keep sender details and visible links included.
A SECOND LOOK FOR YOUR INBOX
Free email & website
phishing checker.
Is this email real or fake? Paste a message, upload an email screenshot,
or check a website URL for warning signs before you click.
Let’s take a closer look.
FREE CHECKText is extracted on this device. You can review it before checking.
Checks the address for brand lookalikes. It does not open or visually inspect the website. Reference domains are a limited US storefront list.
Get an AI second opinion
AI checks can examine email context, sender and link clues, or website content and redirects. Scores describe risk, not guaranteed authenticity.
Checking AI availability…
♧ On-device checks stay in your browser. Optional AI checks send content only with your consent.
✓ No account needed✓ On-device or opt-in AI checks✓ Made for everyday people
LESS GUESSWORK. MORE CLARITY.
Your gut noticed something.
Let’s put it into words.
Fake delivery updates. Urgent bank alerts.
A “quick favor” from your boss.
You don’t need to be a security expert.
See what stands out.
Get a risk assessment with the specific signals that triggered it. AI scores include evidence and limitations; they are not probabilities of safety.
Choose a safer next step.
Learn when to pause, verify through an official channel, or report the message as phishing.
KNOW WHAT TO LOOK FOR
How to spot phishing emails and fake websites
A familiar name or logo is only part of the picture. Look at the sender, the website address, and what you are being asked to do. Use the free checker above to organize those clues into a clearer next step.
Check a suspicious email
Paste the sender’s address, subject, message, and visible links into the email checker. It looks for text patterns such as urgent demands, requests for sensitive information, and suspicious links. This is a phishing risk check, not email address validation or proof that a sender owns an account.
A message saying “your account will close today” or asking you to confirm a password deserves a pause. Open the organization’s app or use contact details you already know instead of following the email’s instructions.
Check email textCheck an email screenshot
Upload a PNG, JPG, or WebP screenshot to extract readable text on your device. Include the sender and the full message where possible. Review the extracted text before running the check, especially when the screenshot is cropped, blurry, or small.
A screenshot cannot reveal where a hidden button actually leads. It also cannot show the full email headers needed to investigate sender authentication. Keep those limits in mind when reading the result.
Check a screenshotCheck a fake store or lookalike URL
Choose Website URL and paste the address. If the page claims to be Walmart, Target, Best Buy, or Costco, select that brand. For another business, enter an official domain you already trust. The checker compares the address against the selected domain and flags some lookalike patterns.
The on-device check analyzes the URL only. Optional AI checks inspect available page text, links and redirects for impersonation clues. Neither mode verifies purchases, scans downloads or compares rendered designs. A matching domain is one clue, not a guarantee.
Check a website addressRead the domain, not just the brand name
In walmart.com.example.com, the controlling domain is example.com. A brand name at the beginning of an address does not make it that brand’s website. These are address examples, not links to visit. Select the claimed brand in the checker so it can compare the actual hostname.
If a message or shop feels wrong, stop before sending money or personal information. Verify through an independently known official channel. Read the FTC’s phishing guidance or report a suspected scam to the FTC.
A LITTLE EXTRA PEACE OF MIND
A second look today.
A watchful eye tomorrow.
Start with an individual check.
Automatic inbox monitoring is planned next.
For the “is this real?” moments.
$0 / always
- On-device email text checks
- Screenshot text extraction
- Plain-English risk explanations
- Installable app with offline text checks
A calmer inbox, on autopilot.
$8 / month · proposed price
- Connect one Gmail or Outlook inbox
- Ongoing checks for new messages
- Alerts with reasons and next steps
- Manage your subscription with Stripe
GOOD QUESTIONS
Email and website checker FAQs
Can this checker prove an email is legitimate?
No. This preview looks for patterns in visible text. A screenshot cannot reveal hidden link destinations, full headers, or prove sender authenticity. Even a message without warning signs may be malicious. Verify sensitive requests using a website or phone number you already trust.
What happens to my email or screenshot?
On-device checks process text and images locally. Optional AI checks send submitted text or URLs and retrieved website content to MailReal and OpenAI after consent; see the Privacy Policy. Screenshot recognition downloads an OCR engine and English language files when first used; your image is not uploaded to an analysis service. Clear the check or close the page to remove its contents from the interface.
How would connected inbox protection work?
The planned paid service uses Google or Microsoft authorization, so you would never give us your email password. New messages would be checked on a secure server. Connecting, payment, and automatic monitoring are not active in this preview.
Can I use this checker on my phone?
Yes. Install it from a supported browser, or use Share → Add to Home Screen in Safari on iPhone. After the first visit, the app supports offline text checks. Screenshot recognition may need an internet connection to download its language resources.
Is this an AI phishing checker?
The on-device checker uses local rules. When available, Run AI check sends your submitted content through MailReal to OpenAI after explicit consent. Its availability is shown beside the button. Connected inbox monitoring remains inactive.
Can it detect a fake Walmart website?
Select Walmart in the Website URL checker to compare the address with walmart.com. The checker can flag a mismatch or a lookalike address, but it cannot see whether a page copies Walmart’s design. An unrelated domain is not proof of fraud by itself.
What do the colors and risk scores mean?
AI checks use green for low risk (0–29), yellow for caution (30–69), and red for likely phishing (70–100). Gray means insufficient evidence. Scores are not probabilities and green does not prove authenticity. On-device checks show suspicious or unverified signals. No mode issues a verified REAL verdict.
Is the phishing checker free without signing up?
Yes. Email text checks, screenshot text extraction, and website URL checks are free and do not require an account. Plus inbox monitoring is planned and is not available to purchase on this site.