Email headers

Not sure an email is real? Paste its full headers (in Gmail: ⋮ → Show original). You'll see who it really came from and whether it passed SPF, DKIM and DMARC. Nothing leaves this page.

Headers can be forged by the sender, except the ones added by your own mail provider (usually the top-most Received and Authentication-Results). A pass does not mean an email is safe, and a fail does not always mean it's fraud.