A second opinion for your inbox
Got an email that feels off? Forward it before you click.
Send it to check@headcheck.email. About a minute later you’ll get a plain-English read on what it’s really after, with the warning signs pointed out.
No app. No password. No subscription. Checks never expire.
HeadCheck is in a private pilot right now. Checks go on sale here soon.
Emails say who they’re from. We check what they want.
Pick an example. They’re made up, but the tricks are real.
- From
- Microsoft 365 <no-reply@m365-notice[.]top>
- To
- you
- Subject
- Action required: your mailbox is almost full
Your mailbox has reached 98% of its storage limit. New messages may not be delivered.
To keep receiving email, confirm your account within 24 hours or your mailbox will be closed.
The red marks are what your report would point out.
- It says Microsoft 365, but it was sent from m365-notice[.]top.
- The button leads to login-m365-verify[.]top, not to Microsoft.
- A deadline and a threat: act in 24 hours or lose your mail.
It has the signs of an attempt to get your password.
- Fine
- Junk
- Unclear
- Suspicious
- Dangerous
Don’t click or reply. If you think it might be real, go to the company yourself.
- From
- David Moreno <dmoreno.office@gmail[.]com>
- To
- you
- Subject
- Are you at your desk?
Are you at your desk? I need a quick favor. Let me know when you’re free.
Sent from my iPhone
The red marks are what your report would point out.
- A familiar-looking name on a free Gmail address, not a work one.
- Short, personal, wants a reply, and never says what it’s for. Many scams open this way; so do some real notes.
We’re not sure about this one.
- Fine
- Junk
- Unclear
- Suspicious
- Dangerous
Hold off. Check with David another way you already trust before replying.
- From
- Greenfield Garden Club <news@greenfieldgardens[.]org>
- To
- you
- Subject
- This week in the garden: bulbs for spring
Hi Sam, it’s bulb season. Here are the five we’re planting this month, and when to get them in the ground.
Read the full newsletter
You’re getting this because you joined our mailing list. Unsubscribe any time.
The red marks are what your report would point out.
- The sender’s identity checks pass for greenfieldgardens[.]org.
- Every link goes to the sender’s own site.
- It reads like something you signed up for, and it lets you leave.
We didn’t find the usual warning signs.
- Fine
- Junk
- Unclear
- Suspicious
- Dangerous
Treat it like any other email, with your usual care.
- From
- StyleHub Deals <offers@stylehub-deals[.]shop>
- To
- you
- Subject
- LAST CHANCE: 70% off everything ends tonight
70% off everything. Ends at midnight!
New season coats, boots and knitwear, all marked down.
The red marks are what your report would point out.
- Loud pressure to buy. That’s marketing, and on its own it isn’t a scam.
- It doesn’t ask you to sign in, pay through the email or reply.
Unwanted marketing, not an attempt to steal anything.
- Fine
- Junk
- Unclear
- Suspicious
- Dangerous
Safe to delete. If it keeps coming, mark it as junk.
Your spam filter already let it through.
Filters sort mail for millions of people at once, and they never tell you why. A report looks at the one email in front of you, puts it on this five-step scale, and shows its working: who really sent it, where every link goes, and what we looked for.
- FineNone of the usual warning signs. Carry on, with your usual care.
- JunkUnwanted marketing, not a scam. Safe to delete.
- UnclearMixed signals. We’ll say so, and tell you how to check.
- SuspiciousSomething doesn’t add up. Check with the sender first.
- DangerousHas the signs of a scam after your password, money or details.
Learn the tricks. Spot the next one yourself.
Every report names the trick it found, so each one teaches you a little more. These six come up again and again.
Wearing a costume
It looks like your IT team, your bank or a parcel company. The address it came from says otherwise.
"Microsoft 365" <no-reply@m365-notice[.]top>A link that lies
The button says one thing. The link underneath goes somewhere else.
"View invoice" goes to storage[.]googleapis[.]com/…A threat with a deadline
Act now, or lose your account, your mail or your money.
"Confirm within 24 hours or your mailbox will close."Just a quick favor
A short note from a name you know, sent from a free address, asking for a reply before it says what it wants. The next message often asks for gift cards.
"Are you at your desk?" from a Gmail addressA prize for your trouble
A survey or a reward that ends at a page asking for your password or card.
"Answer 3 questions to claim your reward."Sign in to see it
A shared file or a voicemail you can only open by typing your password.
"You have 1 new voicemail. Sign in to listen."
We read it once. Then it’s gone.
You’re trusting us with something private, so HeadCheck is built to forget. Here’s everything we keep after checking the mailbox warning above.
No words from the email. No subject, no names, no addresses from inside it. Nothing from attachments, which we never open. Read how it all works.
- email fingerprint
- 3f9a61c0…e2d4
- your address
- a fingerprint only: 8c41d7b2…a07f
- your domain
- yourcompany.com
- our reading
- dangerous, 94% likely
- when
- 3 Nov 2026, 09:14
A fingerprint can tell us we’ve seen something before. It can’t be turned back into the email or your address. Even this record is deleted after 90 days.
Two cents a check.
$5 gets you 250 checks. Same price whether it’s just you or your whole company. No subscription, nothing to cancel, unused checks never expire, and every check comes with the full report.
Not on sale yet. HeadCheck is in a private pilot while we make sure every report is right. These are the prices we’ll open with.
- Unused checks never expire
- Top up whenever you like, from $5
- We’ll remind you before you run out
- Your reports come only to you
On sale soon
- One balance for everyone at your company’s domain
- Nobody signs up. They just forward
- Each person’s reports go only to them
- For company domains, not gmail.com or outlook.com
On sale soon
Save 10% with auto top-up. Turn it on and we top you up when you’re running low, so you never miss a check. Each top-up costs 10% less: 250 checks for $4.50. Switch it off any time.
10% offAdd Google’s scam-site check. Every link in the email gets looked up in Google’s list of known scam sites, so your report can tell you when one is already known. For individual and domain plans.
It’s priced per link, not per email, so the cost depends on how many links an email has. An email with 3 links counts as 3. The same link twice in one email counts once, and a link we’ve already looked up recently is free.
Fair questions
Can I use it now?
Not quite yet. HeadCheck is running as a private pilot with a small group while we make sure every report is right. Buying opens on this page soon.
If you forward an email before then, it comes straight back undelivered with a short note saying HeadCheck isn’t open to your address yet. We never see what was in it.
Is this a spam filter?
No. It’s what you turn to when something gets past yours. It never touches your inbox and only sees what you forward.
Can it be wrong?
Yes, and it tells you when it isn’t sure. Every report says how clear the reading is and shows its working, so you can judge for yourself. It’s a guide, not a guarantee.
Do I need an account?
No. Your email address is your account. Forward from it, and the report comes back to it.
How do I forward an email?
The Forward button in any mail app works. If your app offers “Forward as attachment”, use that: it keeps the original sender details, so the check can see more.
Will you send me anything else?
Only the report you asked for and, once buying opens, your receipts and a heads-up before you run out. No newsletters and no marketing lists. We reply only to the address that forwarded the email, and we never write to anyone named inside it.
What can’t it check?
What’s inside attachments. We never open them, but the report will tell you an email has one.
What happens when I run out?
We’ll email you before that happens, or top you up automatically if you’ve turned that on. If you do run out, you get a short note with a top-up link instead of a report.
Do checks expire?
No. Unused checks stay on your address, or your domain’s balance, until you use them.
How is the Google link check counted?
By link. Each link we look up costs a tenth of a cent ($1 per 1,000), taken from your balance. A newsletter with 40 links costs more than a two-line note with one. We never charge twice for the same link in one email, and links we’ve looked up recently are free.
How does auto top-up work?
When your balance runs low, we top it up with the amount you picked and email you a receipt. Every automatic top-up is 10% cheaper. You can switch it off from any receipt.
Is there a free trial?
Not yet. The examples above show the kind of thing your report will point out.