You should not have to pay to check if something is a scam. This guide lists every free phishing check tool available in 2026, organized by what they check and how they work. Whether you need to verify a URL, analyze an email, or check a phone number, there is a free tool for it — and we recommend the best one for each use case.
The most comprehensive free option: IsThisAScam.to — it checks emails, URLs, texts, and phone descriptions through 6-layer detection. All free.
All-in-One Scam Checkers
IsThisAScam (Recommended)
URL: isthisascam.to
Checks: Emails, URLs, text messages, phone call descriptions, screenshots
How: 6-layer detection engine analyzing domain data, SSL, content patterns, threat databases, AI content markers, and behavioral indicators
Best for: Checking any type of suspicious content from a single interface
Limitations: On-demand (paste content manually)
Got a suspicious email?
Paste it here for an instant analysis.
Free · No signup required · Cmd+Enter to scan
URL-Specific Checkers
Google Safe Browsing Transparency Report
URL: transparencyreport.google.com/safe-browsing/search
Checks: URLs against Google's malware and phishing blacklist
Best for: Quick check of whether Google has flagged a specific URL
Limitations: Only catches already-flagged URLs. See our analysis of what it misses
VirusTotal
URL: virustotal.com
Checks: URLs and files against 70+ security vendor databases
Best for: Checking URLs against the widest range of security vendors. Also checks files for malware. See VirusTotal for emails
Limitations: No email content analysis, technical interface, new threats may show 0 detections
URLVoid
URL: urlvoid.com
Checks: URLs against 30+ blacklist engines plus domain registration data
Best for: Quick domain reputation check with registration details included
Norton Safe Web
URL: safeweb.norton.com
Checks: URLs against Norton's threat intelligence
Best for: Simple safe/caution/warning rating with a trusted brand
Sucuri SiteCheck
URL: sitecheck.sucuri.net
Checks: Websites for malware, blacklist status, and security errors
Best for: Webmasters checking their own sites, but also useful for evaluating unknown sites
PhishTank
URL: phishtank.org
Checks: URLs against community-verified phishing database
Best for: Checking if a URL has been community-reported and verified as phishing
Email Header Analyzers
Google Admin Toolbox — Message Header Analyzer
URL: toolbox.googleapps.com/apps/messageheader
Checks: Email headers for authentication (SPF, DKIM, DMARC) and routing
Best for: Parsing complex email headers into readable format
Limitations: Requires manually extracting headers; does not analyze email content
MXToolbox Email Header Analyzer
URL: mxtoolbox.com/EmailHeaders.aspx
Checks: Email headers with detailed hop timing and authentication results
Best for: Detailed technical analysis of email routing
Domain and WHOIS Tools
WHOIS Lookup
URLs: whois.domaintools.com, who.is, lookup.icann.org
Checks: Domain registration date, registrar, registrant info, expiration
Best for: Checking domain age — a critical indicator. See our domain age guide
SSL Labs Server Test
URL: ssllabs.com/ssltest
Checks: SSL/TLS certificate details, configuration, vulnerabilities
Best for: Deep SSL certificate analysis. See our SSL guide
URL Expanders
CheckShortURL
URL: checkshorturl.com
Checks: Expands shortened URLs (bit.ly, tinyurl, etc.) to reveal the destination
Unshorten.it
URL: unshorten.it
Checks: Expands shortened URLs with security rating of the destination
Image Verification
Google Reverse Image Search
URL: images.google.com (click camera icon)
Checks: Whether an image appears elsewhere on the internet
Best for: Catching stolen profile photos and scraped product images. See our reverse image search guide
TinEye
URL: tineye.com
Checks: Exact and modified image matches across 65+ billion indexed images
Best for: Finding the original source of a potentially stolen image
Community Reporting Databases
ScamAdviser
URL: scamadviser.com
Checks: Website trust score with community reviews
Best for: Reading community reports about specific websites. See our ScamAdviser comparison
BBB Scam Tracker
URL: bbb.org/scamtracker
Checks: Community-reported scams searchable by keyword, type, and location
Recommended Free Protection Stack
- IsThisAScam — primary tool for all content types
- VirusTotal — file scanning and multi-vendor URL checks
- WHOIS lookup — domain age verification
- Google Reverse Image Search — stolen photo detection
- Chrome Enhanced Safe Browsing — passive browser protection
All free. All effective. For more, see best scam detection tools compared and best phishing protection for individuals.
Received something suspicious? Check it now for free →