Is the sender's email domain real or spoofed?

Scam letters and emails love to look official while coming from the wrong place. Paste the message and the checker extracts the sender's domain and flags free-mail impersonation, brand lookalikes (like paypa1.com), and suspiciously new domains.

How sender-domain checks catch fakes

A real company contacts you from its own domain — not gmail/outlook, not a lookalike like amaz0n.com, and not a domain registered last week. The checker looks up the domain's registration age and compares it against known brands.

What still needs your eyes

Domain checks only apply when the message shows an email or link. For a mailed paper letter with no domain, verify the sender through an official phone number or website you look up yourself.

If you already paid or shared your info

Don't panic — acting quickly limits the damage. Do these now:

• Paid by gift card, wire, or crypto? Contact the gift-card issuer, wire service, or exchange right away — some transactions can still be stopped — and keep the receipts and card numbers.
• Entered a card number or paid online? Call your bank to freeze or replace the card and dispute the charge.
• Typed a password or login on a linked page? Change it now — and anywhere you reused it — and turn on two-factor authentication.
• Shared your SSN or other ID? Start a recovery plan at IdentityTheft.gov and consider a credit freeze with the three credit bureaus.
• Report it to the FTC at reportfraud.ftc.gov (and, for online scams, the FBI at ic3.gov).

FAQ