Question 1

How do I check if an email is fake?

Accepted Answer

Copy the raw email headers and paste them into ScamKit's Email Header Analyzer. It checks SPF, DKIM, and DMARC authentication, flags sender mismatches, and traces the routing hops to help you tell if the email is legitimate or spoofed.

Question 2

How do I find raw email headers?

Accepted Answer

In Gmail, open the email, click the three-dot menu, and select 'Show original.' In Outlook, open the email, click File > Properties, and copy the Internet headers. In Apple Mail, go to View > Message > All Headers.

Question 3

What are SPF, DKIM, and DMARC?

Accepted Answer

SPF verifies the sending server is authorized by the domain. DKIM checks a cryptographic signature to confirm the email wasn't tampered with. DMARC ties SPF and DKIM together with a policy that tells receiving servers what to do with failed checks. If any of these fail, the email may be spoofed.