Home Features Security Scanner Pricing FAQ Support Sign in
Free tool

Phishing Scanner

Paste an email. See what it’s really asking you to do. Nothing is uploaded.

Get it your way

Outlook add-in

Check emails inside Outlook

A Scan email button on every message you open.

Download the add-in How to install
Web app

Use it in any browser

Open it, or add it to your home screen. Works offline after the first visit.

Open the web app
Offline file

One file, no internet

The whole scanner in a single HTML file (about 2.8 MB).

Download the file

Install in Outlook

  1. Download the add-in file above.
  2. Open aka.ms/olksideload while signed in to Outlook on the web. In Outlook for Windows, go to File → Info → Manage Add-ins.
  3. Choose My add-ins, then under Custom Addins choose Add a custom add-in → Add from file, and pick the file.
  4. Open any email and select Scan email. It can take a few minutes to appear.

For Outlook on the web and Outlook for Windows and Mac, with a Microsoft 365 or Outlook.com account. Some work accounts block custom add-ins; your IT admin can install it for everyone from the Microsoft 365 admin centre. Email content never leaves Outlook; only the optional live domain check sends domain names to tripass.com.au.

How it decides

1

What is it asking?

Sign in, pay, change bank details, call a number, buy gift cards, keep it quiet.

2

Does it fit the sender?

The sender’s real website is fine. A look-alike or free hosting page is not.

3

Is it dodging checks?

Secrecy, “I can’t take calls”, pressure. “Urgent” alone is never enough.

How well it works

0false alarms on 85 tricky genuine business emails.
75/75hand-written phishing emails caught.
0.5%of 1,500 real genuine emails wrongly flagged.
The full numbers, and their limits
TestPrevious engineNow
85 genuine business emails written to be hard6 wrongly flagged0
75 phishing emails of the same kind45 caught75 caught
40 written afterwards, run once (20 genuine, 20 phishing)0 / 10 of 200 / 17 of 20
1,500 real genuine emails (Enron, no sender)0.5%0.5%
999 real phishing and scam emails (phishing_pot)81.9% flagged71.8% flagged
  • The hand-written emails were written by the same person who wrote the rules, so they flatter the result.
  • Fewer real scams are flagged than before: mostly spam and non-English scams from senders that pass authentication.
  • It can’t see what a linked page contains. Treat it as guidance, not a guarantee.

Measured 4 October 2026.