Is This Email Address a Scam? How to Check in Two Minutes
A checklist for deciding whether an email address belongs to a real person or a scammer: domain checks, breach signals, reverse lookup, and header analysis. Verify before you reply, click, or pay.
Before you reply to, click a link in, or send money to an unfamiliar email, spend two minutes checking the address. Most scam emails fail at least one of a short list of tests, and running them is faster than recovering from a mistake. Here is the checklist, in the order that catches the most fakes fastest.
The two-minute checklist
Check the domain exactly
Look at everything after the @. paypal.com is real; paypa1.com, paypal-security.com, and paypal.account-verify.com are not. Lookalike domains are the single most common tell.
Check for breach history
A real, long-used address usually appears in old data breaches. A pristine address with zero history claiming to be an established company or a long-lost contact is suspicious.
Run a reverse lookup
See whether the address ties to a real, consistent identity, or to nothing at all. A brand-new address with no footprint, contacting you out of the blue, is a caution flag.
Read the headers if it's a company
For mail claiming to be a bank, retailer, or service, check that SPF, DKIM, and DMARC pass and the sending domain matches. Failed authentication means spoofing.
What each signal really means
A fresh, traceless address is the classic scammer setup, made for one target and discarded. A domain that almost-but-not-quite matches a real company is deliberate deception. A total mismatch between the claimed sender and the technical origin, visible in the headers, is spoofing. No single signal is proof, but two or three pointing the same way is a clear answer: do not engage.
The fastest single check
When you want one move that covers most of the checklist, run the address through a reverse email lookup. It returns whether the address ties to a real, consistent identity, its breach history, linked accounts, and any connected phone number, in one private report in about a minute. StoryCheck does this without notifying the sender, so you can decide whether to reply with facts instead of a guess.
Run a private check on any phone number
Get a 60 second report with possible owner, line type, location signals, and risk indicators. The phone owner is not notified.
Run a checkFrequently asked questions
How can I tell if an email address is fake?
Check the domain for lookalike tricks, check whether the address has any breach or public history (real addresses usually do), and run a reverse lookup to see if it ties to a consistent identity. A brand-new, traceless address contacting you unexpectedly is the strongest fake signal.
Is an email safe if the address looks real?
Not necessarily. Real-looking addresses can be spoofed, and real accounts can be hijacked. Verify the address, but also judge the message: legitimate senders never ask for passwords, verification codes, or gift-card payments.
Can I check who's behind a suspicious email address?
Yes. A reverse email lookup shows whether the address ties to a real identity, its breach history, linked accounts, and any connected phone number, privately and without notifying the sender.
Related articles
Reverse Email Lookup: The Complete Guide (2026)
What a reverse email lookup can and cannot find, every method that works, and how to identify who's behind an email address. The honest guide, with the limits nobody else states.
How to Trace Where an Email Really Came From
The sender name on an email is trivial to fake. How to read email headers to find the real origin, tell spoofing from a genuine sender, and identify who is actually behind a message.
The 'Your Account Was Compromised' Email: Phishing Explained
Emails warning that your account was hacked or suspended are the most common phishing template. How to tell a real security alert from the bait, and what the login link really does.
How to Find Out Who Owns an Email Address (2026)
A practical guide to identifying who is behind an email address, checking if it is linked to scams or breaches, and what you can legally find from an email alone.
Check the number. Know more.
Run a private 60 second report. The phone owner will not be notified.
Start your check