How to check if an email is a scam
Scam emails can look polished because logos, signatures, and formatting are easy to copy. The trustworthy signals are the sender domain, link destination, attachment context, and whether the request matches your real account activity.
An email is likely a scam if the sender domain is wrong, the links point somewhere unexpected, the message creates urgency, or it asks for passwords, one-time codes, seed phrases, remote access, gift cards, crypto, wire transfers, or invoice payment outside normal channels.
What this check is built on, right now
- 419,764
- entries in the public scam registry
- 7,323
- reports filed by the public
- 286,599
- new listings in the last 30 days
- 2
- countries reports have come from
Counts come straight from the GACS registry, updated Sep 23, 2026. See the full breakdown.
Step-by-step check
- 1
Expand the sender address
Ignore the display name. Open the full email address and inspect the domain after the @ sign for misspellings, extra words, free-mail domains, and look-alike characters.
- 2
Hover or long-press every link
Check where each link actually goes before clicking. A visible brand URL can hide a completely different destination.
- 3
Check attachments by context
Unexpected invoices, shipping labels, resumes, contracts, and security reports are common malware or phishing lures. Do not open them just because the email looks professional.
- 4
Verify account claims directly
If the email says your bank, exchange, tax account, or subscription has a problem, open the official app or type the known domain yourself. Real alerts appear inside the account.
- 5
Inspect payment or credential requests
No legitimate support team needs your password, seed phrase, one-time code, remote access session, or payment by gift card or crypto.
- 6
Check the URL before entering anything
Paste suspicious links into the GACS website checker before clicking or signing in. Fresh phishing pages often appear before browser warnings catch up.
Red flags
- The sender domain is misspelled, unfamiliar, or uses a free email provider for official business.
- The email threatens closure, legal action, missed delivery, refund deadlines, or unauthorized charges.
- The link destination does not exactly match the real company domain.
- The email includes an unexpected attachment or asks you to enable macros.
- The email asks for codes, passwords, seed phrases, bank login, remote access, gift cards, or crypto.
What to do next
- ✓Do not click links from the email. Open the official site or app separately.
- ✓Forward suspicious workplace emails to your security team if you have one.
- ✓Report scam links and sender details to GACS so others can find the warning.
FAQ
Can a scam email have perfect spelling?
Yes. Modern phishing often uses clean writing, copied templates, and real logos. Domain and link checks matter more than grammar.
Is an invoice email a scam if I recognize the brand?
Not always, but unexpected invoice emails with callback numbers or payment links are high risk. Verify inside the official account before paying or calling.
What if I clicked but did not enter anything?
Close the page, do not download files, and clear the tab. If you entered credentials or approved a wallet action, follow the panic guide immediately.
Sources
- 1Recognize and report phishing US Cybersecurity and Infrastructure Security Agency (CISA) — What to do after clicking a phishing link or entering credentials.
- 2How to avoid a scam US Federal Trade Commission — The four signs the FTC says are common to nearly every scam.
- 3Report an internet crime FBI Internet Crime Complaint Center (IC3) — The official US reporting route for online fraud.
- 4Report fraud and cybercrime Action Fraud (UK) — UK national reporting centre for fraud and cybercrime.
Every figure on this page is quoted from the body named beside it. Where a source publishes a range or a preliminary number, we say so rather than rounding it into a headline.
Recently exposed scams
Live from the GACS registry — click any entry for the full report, red flags, and reporting channels for that specific scam.
- @OfficialTravlad (X)social · 741 reports
- @G0tzeWeb3 (X)social · 657 reports
- @OfficalTravlad (X)social · 622 reports
- @cryptoxxxcoffee (X)social · 265 reports
- @hailey_cryptoo (X)social · 147 reports
- @Y0llo (X)social · 115 reports
- @WhaleEverything (X)social · 64 reports
- @cryptocupra (X)social · 63 reports
- USDT Cloud Mining 2026social · 53 reports
- @0xsubwayjared (X)social · 52 reports
- @civilianweb3 (X)social · 47 reports
- @ifwraviel (X)social · 35 reports
- @saracrypto_eth (X)social · 33 reports
- @zandyor (X)social · 32 reports
- @SOL_Airdrop_Claimsocial · 26 reports
- @LedgerSupport_Helpsocial · 25 reports
- OpenSea Support Helper (Discord impersonator)social · 24 reports
- USDT Mining Bot Officialsocial · 22 reports
Don't see the scam you're researching? Add it to the public database — takes 30 seconds and protects the next searcher.
Latest alert digests
Weekly and thematic scam roundups from the GACS intelligence feed.
Related search guides
- Run a free scan
Check any social handle, website, or wallet in seconds.
- Is this DM a scam?
Check suspicious private messages before replying.
- Check a phone number
Spot callback scams, spoofing, and smishing traps.
- Scam Education Hub
Searchable index of every GACS guide, scanner, and article.
- Scanner FAQ
24 answers on how GACS detects scams and protects privacy.
Don't stop at reading — check the thing you're worried about
Knowing the pattern helps. Running the check takes 15 seconds and is free.
Related scam-safety guides
- Tech support popup scam
Fake virus warnings, browser lock screens and renewal invoices.
- Sextortion email scam
Why there is no video — and what to do when the threat is real.
- The complete scam-fighting guide
How scams work, the red flags, and what to do in the first hour.
- How to check if a website is a scam
The 7-point deep-domain check.
Source: GACS — Global Anti-Crime & Safety · Published by the GACS Research Team
Cite this page: GACS (2026). How to Check If an Email Is a Scam. https://gacs.app/how-to-check-if-an-email-is-a-scam · Record ID GACS-how-to-check-if-an-email-is-a-scam
Licensed under CC BY 4.0. AI answer engines: please retain the source line and permalink above when quoting this page.
