The email checker for small businesses
Is this email safe? Forward it and find out.
One button for you and your team. PhishHook tells you in seconds whether an email is phishing, a scam, a cold sales pitch or the real thing, and explains why in plain English.
- 10 free checks a month
- No IT setup
- Answers in plain English
PhishHook verdict
PhishingMicrosoft 365 <alerts@micros0ft-support.co>
Your password expires today: keep the same password
This is a fake Microsoft email trying to get your password.
- It says Microsoft, but micros0ft-support.co uses a zero instead of an "o".
- The "Keep my password" button goes to a free hosting site, not microsoft.com.
- It tries to rush you: "expires today".
How it works
Three steps. No security jargon.
01
Forward it
Got an email that feels off? Forward it to your PhishHook address, or paste it into your dashboard. No software to install.
02
We check it
We compare the sender with the name it shows, look for lookalike domains, read its security checks and follow every link.
03
Get a straight answer
Within seconds you get a reply: Phishing, Scam, Cold pitch or Legit, with the reasons in plain English and what to do next.
Four clear answers
Every email gets one of four verdicts.
Pretends to be someone you trust to get your login, card details or money.
e.g. "Your Microsoft 365 password expires today" from micros0ft-alerts.com
Inheritance, lottery, investment and other con stories after your money.
e.g. "Next of kin to a £4.2 million estate" from a barrister you've never heard of
SEO, web builds, app development and paid-review pitches. Harmless, just a waste of time.
e.g. "I noticed some errors on your website" and an SEO package
Really from who it says, with nothing suspicious inside.
e.g. Your real Xero invoice reminder, passing every security check
What we check
The tells a security expert would look for.
- Sender versus the name it shows"Microsoft 365" sending from a Gmail account is a red flag.
- Lookalike domainspaypa1.com, micros0ft-support.co, and other near misses.
- Sender security checksSPF, DKIM and DMARC, the checks that prove an email really comes from who it says.
- Where links really goA button that says your bank but goes somewhere else gets caught.
- Pressure and urgency"Final notice", "within 24 hours", new bank details, gift cards.
- Risky attachmentsHTML files, macros and archives often used for fake login pages and malware.
Then our AI reads the email the way a careful colleague would, with every one of those findings in front of it, and writes the verdict in plain English.
For teams
Your staff forward. You see everything.
Add your team's email addresses and anyone can forward a suspicious email. They get the answer straight back, and you get a dashboard of every check: who's being targeted, by what, and how often.
Set up your team- Staff just forward, no logins needed
- Owner dashboard with every verdict
- £3 per person, from 3 people
- Weekly summary to your inbox
Pricing
Less than the price of another email account.
Solo
£4/month
1 person, unlimited checks, forwarding and your full check history. Or £40 a year.
Choose SoloTeam
£3/person/month
Minimum 3 people (£9 a month). Owner dashboard, cold-pitch auto-filter and a weekly summary.
Choose TeamBusiness
£5/person/month
Minimum 5 people. Everything in Team, plus the Outlook and Gmail button, admin controls and monthly reports.
Choose BusinessPrices exclude VAT. Cancel any time.
Common questions
How do I send an email to PhishHook?
Forward it to your PhishHook address, shown on your dashboard. For the fullest check, use "Forward as attachment" (Outlook and Gmail both have it): that keeps the original sender's security details. You can also paste an email into the dashboard.
Do you read or keep my emails?
We read the email you send us only to check it. We keep the sender, subject, verdict and reasons so you can see your history, plus a short snippet. We don't keep the full email. Our AI provider processes the text to help write the verdict and doesn't use it for training.
Is it ever wrong?
Sometimes, like any checker. That's why every verdict comes with its reasons, so you can see what we saw. If it says "Looks legit" but asks you to pay or log in, it's always worth checking with the sender another way.
What's a "cold pitch"?
The steady stream of unsolicited offers small businesses get: SEO and "first page of Google", website redesigns, app development, paid app reviews, lead lists. Not dangerous, just time-wasting. PhishHook labels them so you can delete them with a clear conscience.
Do I need IT to set it up?
No. There's nothing to install and no changes to your email settings. Sign up, then forward. On Team plans you add your staff's email addresses and they forward too.
Does it block emails before they arrive?
No, PhishHook is a second opinion for the emails that get through. Big email security gateways block mail at the server but need IT to set up and cost more. PhishHook is for the moment you're holding an email and aren't sure.