Free security tool · Private
Is that email really from who it says?
Paste the hidden headers from a suspicious email. We'll show who really sent it, whether it passed the anti-fake checks and any warning signs, in plain English.
Warning signs
The basics
The path it took
From the first server that handled it to your inbox.
All headers
Good to know
Questions people ask
How do I find the headers in Outlook?
Open the email in its own window, then choose File, Properties and copy everything in the Internet headers box. In Outlook on the web or new Outlook, open the message, click the three dots, then View, View message details.
How do I find the headers in Gmail?
Open the email, click the three dots next to Reply and choose Show original. Click Copy to clipboard and paste it here.
How do I find the headers on an iPhone or Mac?
On a Mac, open the email in Mail and choose View, Message, All Headers (or Raw Source). The iPhone Mail app can't show headers, so use a computer or forward the email to your IT team as an attachment.
Are the headers sent anywhere?
No. The headers are read inside your browser, on your own device. Nothing you paste is sent to us.
What are SPF, DKIM and DMARC?
They're checks the receiving email system runs to make sure an email really came from the company it claims to be from. A fail on these is a strong sign of a fake. You can check your own domain with our Email Security Check.
Phishing emails getting through?
Book a free security check. We'll look at your email filtering and show your team how to spot the fakes.
More free tools: see them all