PhishScan — AI Phishing Detection

Check emails, links and files for phishing with AI. Open risky links safely in a sandbox. Gmail, Outlook, right-click any link.

Stop phishing before you click. PhishScan checks suspicious emails and links with AI and a dozen reputation sources, then gives you a clear verdict — safe, suspicious or phishing — with a 0–100 risk score and a plain-language explanation. WHAT IT DOES - Check an email in Gmail or Outlook with one click — a "Check with PhishScan" button right in the message. - Right-click any link → "Check with PhishScan" before you open it. - Proactive inbox scanning (optional): risk dots next to unread emails before you open them. - Warning before a risky click (optional): if a link's visible text shows one domain but leads to another, uses a look-alike domain or a raw IP, you're warned before the page opens. This runs locally in your browser. - Popup checker: paste email text or a URL, or upload an .eml file. HOW IT WORKS PhishScan combines an AI model that reads the message for social-engineering cues with deterministic checks: - URL reputation — VirusTotal, Google Safe Browsing, PhishTank, DNS blocklists - Domain intelligence — domain age, DNS, SSL, hosting reputation - Email authentication — SPF, DKIM, DMARC, sender-spoofing and reply-to checks - Attachments — antivirus and YARA rules; on paid plans, suspicious files can be opened in an isolated sandbox - QR-code phishing — decodes the link hidden in a QR image - A screenshot of the page is rendered on isolated infrastructure, so the risky site never loads on your device PRIVACY By default, the full content of your checks is not stored after the check: your history keeps the verdict, the indicators found and a short excerpt. Full samples are kept only if you turn on sample saving (encrypted, up to 180 days). Files sent to the sandbox are opened in an isolated environment; only the report is kept. The pre-click warning works locally and sends nothing. Full policy: https://phishscan.io/privacy REQUIRES A PHISHSCAN ACCOUNT Connect with an API key from https://phishscan.io/account/api-keys. A free plan is available. Plans: https://phishscan.io/pricing Questions: support@phishscan.io