Sender or reply-to mismatch
The display name looks familiar, but the actual address, domain, or reply-to route contains a different organization, misspelling, or unexpected country domain.
MindDividend Shield guide
Is this email phishing? Check before you click.
A convincing logo or familiar sender name is not proof. Review the identity, request, link, attachment, and pressure pattern before you sign in, pay an invoice, download a file, or reply.
Check a redacted emailFive phishing email signals
One clue can be harmless. Several together are a reason to stop and verify outside the email.
Urgent login request
An account warning, security reset, invoice, or document asks you to sign in immediately through a link supplied in the email.
Unexpected attachment
A document, invoice, delivery file, or shared-drive notice asks you to open a file, enable macros, or install software before you can view it.
Payment or secrecy pressure
A request changes bank details, asks for gift cards or crypto, demands a transfer, or tells you not to confirm with a colleague or the official provider.
Link and language anomalies
Look for shortened links, extra subdomains, strange characters, generic greetings, unusual grammar, or a story that does not match your recent activity.
Too-good-to-be-true reward
Unexpected refunds, prizes, jobs, investment returns, or account upgrades are often used to make you click before you think.
Use the checker safely
Do not use the email’s link
Open the official app or type the known website yourself. Do not call the phone number or reply address supplied by the suspicious email.
Inspect the real destination
Hover without opening when possible. Compare the destination with the organization’s known domain, not just the visible link text.
Verify the request independently
Use a saved phone number, a known colleague, or the official support channel. For invoices or bank changes, confirm through a second route.
Redact before using a tool
Remove passwords, codes, payment details, personal addresses, private attachments, and unique links before using MindDividend Shield for a first-pass review.
Remember: a first-pass checker can organize visible warning signs, but it cannot guarantee that an email is safe. Verify important requests through the official source.
If you already clicked
The next step depends on whether you only opened the link, entered credentials, downloaded a file, approved a login, or sent money.
Follow the post-click response checklist →More safety guides
General scam message checker · Bank alert guide · WhatsApp guide · Safety and privacy
Pause before the email decides for you.
Try a free first-pass review with a non-sensitive, redacted example.
Open MindDividend Shield →