For families and tiny offices

Is this email a scam?

Paste a suspicious email address or link for a quick check, or go down the checklist before you click, pay, or reply.

Paste and check

Paste an email, a link, or a domain. Your paste stays in your browser, except we may ask a public domain register for the registration date.

Please read: this helper is not perfect and not a guarantee. It is not legal, financial, or security advice. Do not paste passwords, codes, or full message bodies. Never paste anything that includes a password or one-time code.

Want a longer walkthrough? Open the full check page. Need hands-on help? See security consulting for Northern Virginia and the DC metro.

Or use the warning-sign checklist

Please read: the paste-and-check tool and this checklist are helpers, not guarantees. They are not legal, financial, or security advice. The checklist does not read your email, and ticks stay on this page. A message can look fine and still be a scam. When in doubt, contact the company a way you already trust.

Warning signs

The sender looks offThe name says "Bank," but the address is a random Gmail, or the spelling is a little wrong, like paypa1.com.
The link goes somewhere strangeOn a computer, rest your mouse on the link without clicking. The real web address shows at the bottom of the screen. On a phone, press and hold. If it does not match the company, do not tap it.
It rushes you"Act now," "your account will close today," or "pay in 1 hour." Real companies give you time.
It asks for money or secret infoGift cards, wire transfers, crypto, payment apps, your password, a code sent to your phone, or your Social Security number.
The writing feels wrongOdd greetings like "Dear Customer," strange spelling, or a tone that does not sound like the company. (Some scams have perfect grammar, so this sign alone is not enough.)
You did not expect itA bill you do not know, a prize you did not enter, or a package you did not order.

Example: a fake "account on hold" email

Made-up example for practice

From: Account Team <[email protected]>
Subject: Your account is on hold

Dear Customer, we could not process your payment. Update your card in 24 hours or your service will stop. Click here to update.

Signs here: a sender address that is not the company's, a generic greeting, a deadline, and a link to "update payment." The FTC says real companies will not email or text you a link to update your payment information. (Source: FTC: How to recognize and avoid phishing scams)

What to do if it looks like a scam

Do not click links, open attachments, or call numbers in the message.
Go to the company's website by typing it yourself, or use the app you already have. Or call a number from your card or bill.
Report it. The FTC asks people to report scams at ReportFraud.ftc.gov. CISA also explains how to report phishing: CISA: Recognize and report phishing.
If you clicked or shared info, see what to do next.

More guides

The longer scam email checklist (IRS, package, and bank reset scams)
Passkeys in plain language
2FA: app or text message?
After a data breach
Email safety for tiny offices

Sources we used

Links checked November 5, 2026. If a page moved, search the agency site for the title.

Is this email a scam?

Paste and check

Or use the warning-sign checklist

Warning signs

Example: a fake "account on hold" email

What to do if it looks like a scam

Lock things down in a weekend

Check an email or link

Get help from a pro

Password managers

Freeze your credit (free)

More guides