Privacy-first business email check
BEC Request Inspector
Review suspicious payment, invoice, gift card, payroll, or vendor-change requests before you respond.
Tool guidance
How to use this tool
Pasted request text stays in your browser.
How to use it
Paste the suspicious payment, invoice, gift card, payroll, or vendor-change text.
Review urgency, secrecy, sender, payment, and process-bypass signals.
Scan any URLs separately before opening them.
Use the checklist to decide what needs verification.
What results mean
This is a checklist-style signal tool, not proof of fraud.
Urgency, secrecy, free email, and bank-change wording deserve context.
A low signal count does not make a request safe.
What to do next
Check headers if the message arrived by email.
Inspect visible links with Email Link Inspector.
Verify money or credential requests through a known channel.
Browser extension
CheckLink browser extension
Open the current page, inspect links from the browser menu, and jump into CheckLink faster without an account.
Works with Chrome and compatible Chromium-based desktop browsers. Firefox and Safari versions are not currently available.
The extension sends a URL only when you choose a scan action. It does not store scan history.
Risk context
Needs verification
Score 30/100. This is a similarity and signal checklist, not proof of fraud.
Signals found
Make or approve a payment: The user identified this as the requested action.
Verify before acting
Pause before replying, clicking, downloading, paying, or sharing information.
Open the claimed organization’s official site or app independently; do not use contact details from the message.
Require a second, independent verification before any credential, code, banking, gift-card, crypto, or payment action.
URLs found
No scan-ready URLs found.
Call a known contact using an official number before changing vendor or payroll details.
Do not use contact details provided inside the suspicious message.
Scan any URLs separately before opening them.
Treat urgency, secrecy, and process-bypass requests as context signals.