Built by AuditROI | Privacy-first

Is It a Scam? Check Before You Click

Free scam, phishing & spam checker. Get an instant Trust / Caution / Nope verdict.

Paste a suspicious email, link, or domain to check

We never access your emails or accounts.

Free forever No login required We never see your emails

How It Works

Three simple steps to check if an email, link, or domain is safe

1

Paste What's Suspicious

Got a suspicious email, link, or domain? Paste it in the checker above - we'll extract the domain automatically.

2

We Run Security Checks

We check email authentication, domain age, brand impersonation, blocklists, SSL certificates, and more.

3

Get Your Verdict

Receive a clear Trust / Caution / Nope verdict with plain-English explanations and what to do next.

Real Statistics

Scams Are Costing Billions

The numbers are staggering. Protecting yourself has never been more important.

$16.6B
Global Cybercrime Losses
2024 - 33% increase from 2023
FBI IC3 Report
$2.03B
Australian Scam Losses
2024 - ACCC Scamwatch
601,000+ reports
$55.5B
Business Email Compromise
Lost globally over past decade
Avg loss: $120,000
28%
Small Business Victims
of BEC attacks target SMBs
83% unrecoverable
193,407
Phishing complaints in 2024 - the #1 reported cybercrime
$70M+
Lost to phishing alone (US)
See Full Report
Sources: FBI IC3 ACCC Scamwatch National Anti-Scam Centre

What We Check

Comprehensive scam detection - we analyze multiple security signals

Email Authentication

SPF, DKIM, and DMARC records that prevent email spoofing

Brand Impersonation

Detects lookalike domains (e.g., "arnazon.com" vs "amazon.com")

Domain Age

New domains are suspicious - scammers create them constantly

Blocklist Check

Checks Spamhaus, SURBL, and other security blocklists

SSL Certificate

Valid HTTPS and certificate grade (A/B/C/F)

Security Headers

HSTS, CSP, and other web security headers

Website Check

Detects parked domains and missing websites

Redirect Analysis

Detects suspicious redirects to different domains

What the Results Mean

Clear verdicts with actionable advice

Trust

Domain passed our security checks. Proper email authentication, not on blocklists, not impersonating known brands.

What to do:

  • • Proceed with normal caution
  • • Still verify unusual requests
  • • When in doubt, call the company

Caution

Some warning signs detected. Partial security, new domain, or other concerns. Could be legitimate but warrants extra care.

What to do:

  • • Be extra careful with this one
  • • Don't click links - go to site directly
  • • Verify by calling official number

Nope

Strong scam indicators found. Blocklisted, impersonating brands, no security, or brand new suspicious domain.

What to do:

  • • Do NOT trust this - likely a scam
  • • Never click links or attachments
  • • Report as spam/phishing

When Should You Check?

Anytime you're suspicious - it takes seconds

📧

Suspicious Emails

Invoice requests, "urgent" account issues, password resets you didn't request. Paste the sender's email address to check the domain.

🔗

Suspicious Links

Before clicking a link in an email or message, paste it here. We'll check if the domain is legitimate or a potential phishing site.

💬

SMS & Text Scams

"AusPost delivery failed" or "Your bank account is locked" - text message scams include links. Check the domain before clicking.

🤝

New Suppliers & Contacts

Getting emails from a new business contact? Check their domain to verify they're legitimate before sharing sensitive info or making payments.

📱

Social Media Links

Ads and DMs on social media often link to scam sites. Paste the URL to check if it's a lookalike domain impersonating a real brand.

🛒

Online Shopping

Found a deal that's too good to be true? Check the store's domain. Scam shops often use brand new domains with no security.

For Business Owners

Is Your Domain Showing Caution or Nope?

If your business domain isn't properly protected, customers checking their emails will see a warning - and scammers can send fake invoices using your name.

AuditROI Can Help You:

  • Properly configure SPF, DKIM, and DMARC
  • Monitor for changes and threats
  • Protect your brand from impersonation
Fix Your Email Security

Frequently Asked Questions

What does TrustNope check?
TrustNope performs comprehensive scam detection: email authentication (SPF, DKIM, DMARC), domain age, brand impersonation (lookalike domains), blocklist checks (Spamhaus, SURBL), SSL certificate validity, security headers, website existence, and suspicious redirect detection. All in seconds.
What if it says Trust - am I safe?
A "Trust" verdict means the domain passed all our security checks - proper email authentication, not on blocklists, not impersonating known brands, and has been around for a while. However, no tool is 100% perfect. Always verify unusual requests through official channels.
Do you read my emails or track my searches?
No. We only check the domain's public DNS records and website properties - the same information anyone can look up. We never see, read, or store any email content. We keep anonymous statistics on domain checks to improve our service, but we don't track individual users.
Can I check links, not just emails?
Yes! Paste any suspicious link and we'll extract the domain and check it. This works for links in emails, SMS messages, social media DMs, or anywhere else. We'll tell you if the domain is blocklisted, impersonating a brand, or has other red flags.
Is this free?
Yes, TrustNope is completely free for consumers and businesses. We want everyone to be able to check suspicious emails, links, and domains without any barriers. We're supported by AuditROI, which offers professional security audit services.

Stop Scams Before They Start

Check any suspicious email, link, or domain in seconds. Free for consumers and businesses.

Check Now Learn About Scams