A calmer inbox

Forward the message.
We’ll look for the clues.

One suspicious email per check. Sending the original as an attachment gives us the clearest separation from your forwarding note and signature.

We’ll ask you to confirm your address before your first analysis. We may ask again if delivery authenticity cannot be independently established.

  1. Gmail on a computer

    Select the message in your inbox. Open the More menu and choose Forward as attachment. Address the new email to check@scamclues.com and send it. You can also drag a message from your inbox into a new draft.

  2. Outlook

    Choose the message, open the additional reply/forward options, and look for Forward as attachment. Availability varies by Outlook version. If it is unavailable, download the original as an .eml file and upload it on ScamClues.

  3. Apple Mail on a Mac

    Select the message, then choose Message → Forward as Attachment. Address it to check@scamclues.com.

  4. Using a phone?

    Ordinary forwarding works when the original boundaries are clear. You can also upload a readable screenshot. Include the sender, complete message, and requested action. Screenshots cannot preserve email authentication.

What happens to your signature?

With an attached original, the outer forwarding message is excluded before analysis. The original sender’s signature remains evidence because it may contain an important link. An ordinary plain-text forward can have ambiguous boundaries; if we cannot identify the original, we ask for clearer evidence.

Your private report

The email we send contains a private access link, not the message contents or verdict. Open it, then choose Continue to confirm. If a link expires, sign in again from My checks. Signing in never uses an allowance.

Upload a message instead ↗