H

HelpMeHowTo

Tiny tools that help you sanity‑check sketchy stuff.

No login · Runs in your browser · Not a guarantee of safety

Is this email sketchy?

Quick checklist for suspicious emails

Paste the email details and run through a short checklist of common phishing red flags. This tool can’t promise an email is safe — it just helps you slow down and think.

Use: weird invoices, “account alerts”, unexpected messages

Data: stays in your browser — nothing is sent to a server

Always follow your company’s security policy

Sender name (as shown)

Sender email address

If you can see the real address, paste it here.

Subject line

Email body (optional)

Do not include passwords or highly sensitive data.

Checklist of common red flags

This email is unexpected, about something I didn’t start (no account change, no purchase, no support ticket). The email uses strong urgency or fear (“immediately”, “last warning”, “your account will be closed”). It wants me to click a link or button to log in, confirm details, or pay an invoice. It asks for passwords, 2FA codes, bank / card details, Social Security number, or other sensitive info. There’s an unexpected attachment (especially .zip, .exe, .html, .pdf I wasn’t expecting). The “from” address doesn’t match the real company website (weird domain, spelling, extra words). There are lots of spelling / grammar mistakes, or it feels off compared to normal emails from that company.

Helper tool only. When in doubt, don’t click — contact your IT/security team instead.

Risk assessment

Based on your checklist & text scan

Low obvious risk (still be careful)

Fill out the checklist and we’ll give you a rough risk level plus some reminders on what to do next. This is not a guarantee that an email is safe.

No major red flags selected yet.

Even if this tool shows “low risk”, an attacker could still be trying something subtle. If something feels off, don’t click links — go directly to the official website or use contact details you already trust.

Safety note:
Don’t paste passwords, verification codes, or banking details. Use this as a red‑flag checklist, not a guarantee.

How to use the “sketchy email” checker

This tool highlights common phishing red flags—things like urgent language, mismatched sender domains, suspicious links, and requests for passwords or gift cards.

Use it safely

Don’t paste passwords, verification codes, or sensitive personal info.
If the email is from a bank, payroll, or crypto exchange, be extra cautious—go to the website directly instead of clicking links.

What to do if it looks suspicious

Do not reply.
Verify using a trusted method (call a known number, open the official website directly).
Report it to your email provider and your workplace (if relevant).

Guide: how to spot a sketchy email Browse all tools

How it works

This checker highlights common “phishing” and scam signals based on the information you paste (sender name/address, subject line, and message text). It’s a quick second opinion — you should still verify anything that asks for money, passwords, or urgent action.

It looks for patterns like urgency, suspicious links, mismatched sender domains, and requests for sensitive info.
Privacy note: this page runs as a static, in‑browser tool. Your pasted text is processed locally in your browser (not uploaded to a server by this site).

Worked example

Example: Sender: “PayPal Support” <support@paypaI‑secure.com>
Subject: “Action required: Account suspended”
Body includes a shortened link and asks you to “confirm your password.”
These are classic red flags (look‑alike domain, urgency, credential request).

Quick FAQ

Is it safe to paste an email here? Avoid pasting sensitive personal data. Remove account numbers, addresses, or one‑time codes first.
What should I do if it looks sketchy? Don’t click links. Go to the company’s official site by typing the URL yourself, or call a verified number.
Can a “clean” email still be a scam? Yes. Sophisticated phishing can look perfect — always verify important requests.

Common mistakes

Trusting the display name: the visible name can be faked — the domain matters.
Clicking “unsubscribe” in suspicious emails: it can confirm your address is active.
Assuming bad grammar is required: many scams are professionally written.

Limitations

This is a heuristic checker; it cannot guarantee an email is safe or unsafe.
It does not scan attachments or verify real-time link destinations.
When in doubt, verify through official channels.

Sketchy emails: common questions

Can this tool guarantee an email is safe?

No. This page is only a helper to highlight common red flags like urgency, strange senders, or requests for sensitive information. Attackers constantly change tactics, and some phishing emails look very polished. Always follow your workplace security policy and when in doubt, treat the email as suspicious.

What are the biggest signs of a phishing email?

Some strong warning signs: unexpected password resets, account suspension threats, requests for money or gift cards, mismatched sender addresses, links that don’t match the real site, and attachments you weren’t expecting. If an email mixes urgency with requests for money or login details, slow down and verify it in another way.

Is it safe to paste an email here?

This tool runs entirely in your browser and doesn’t send what you type to a server. Still, avoid pasting extremely sensitive information. You never need to paste passwords or full card numbers here (or anywhere else).

What should I do if this page says “high risk”?

Don’t click any links or open attachments. If it claims to be from a company you use, go to the website directly by typing the address into your browser, or use a phone number or app you already know. At work, forward the email to your security / IT team using whatever process they recommend.

Help us improve this tool. If something looks off or you want a feature, tell us — it helps keep these tools free.