Email Safety Checker

Identify likely spam, phishing, or legitimate email signals
← Tools

Start with the email header

Headers are the most important evidence: they can show authentication failures and mismatched sender addresses. Add the body too when available for supporting context. A notice that presents itself as the Australian Government, myGov, Services Australia, Medicare, or Centrelink has to come from a .gov.au address, including when that notice is a picture.

The email is sent only for analysis and is never written to the database. The report records aggregate outcomes only.

1

Saved message file

Drop an Outlook .msg file or an Apple Mail .eml file. Maximum 10 MB. It is analysed for this request only and is not retained.

Drop a .msg or .eml file here
Or click this box to choose a file.
No file selected

If dragging from Outlook opens “Save As”, save the file first, then choose it here or drag it from Finder or File Explorer.

2

Apple Mail

Use the message already in Mail on a Mac or iPad. A Mac can include the full header. An iPad can include the message you can read.

Mac
  1. Open Mail and select the message in the list.
  2. Drag that message onto the desktop. Mail saves it as an .eml file.
  3. Drop the .eml file on the box above, or choose it with the button.

You can also use File → Save As and choose Raw Message Source. Or open View → Message → Raw Source, copy the whole window, and paste it into Email header.

iPad
  1. Open Mail beside this page in Split View.
  2. Drag the message from the list onto the box above. Mail passes it across as an .eml file.
  3. If the drag does not land, touch and hold the message text, tap Select All, tap Copy, and paste it into Message body.
  4. Tap the sender’s name so From and To appear. Copy those lines into Email header when Mail lets you.

The copy from iPad Mail is the message you can see. It does not include SPF, DKIM, or DMARC. For those, open the same mailbox in Mail on a Mac and use the .eml file.

3

Most important

Paste the full header. This is where the From address and authentication results are.

How to get the header: Mac Mail: View → Message → Raw Source, then copy all. Gmail: three-dot menu → Show original → copy headers. Outlook web: More actions → View → View message details. Outlook desktop: File → Properties → copy Internet headers.
4

Optional

Paste the message itself, including any wording around a picture notice.

Privacy: no header, email content, subject, recipient, URLs, or attachments are stored. The From address is recorded for reporting and a one-way keyed fingerprint is retained to identify senders previously marked Not Legit.