Features

Phishing Email Scanner

Q: How does ScamShield AI catch a spoofed supplier email?

ScamShield AI reads every inbound email against 12 India fraud categories. It flags a sender domain that is a lookalike of your real supplier (often one character off), display-name spoofing, a changed NEFT bank account in the payment instruction, and urgency pressure to pay today. When these signals stack up, the email is scored as high risk with a plain-English reason, so your accounts team sees the danger before releasing a payment. A verdict is returned in under 3 seconds.

Q: Do you store my emails?

No. In line with India's DPDP Act 2023, the email body is processed in memory and is never written to the database. Only metadata such as the subject line and a masked sender address is retained, for up to 90 days, so you can locate a flagged message. The content of your email is not stored.

Q: Which mailboxes can I connect?

You can connect Gmail, Microsoft 365 and Zoho Mail. Once connected, every incoming email is scanned automatically. If you prefer not to connect a mailbox, you can also paste a suspicious email into the scanner for a one-off check.

Q: Which plans include the phishing email scanner?

The phishing email scanner is available on both the Starter and Professional plans. Start with a 30-day free trial. No card required.

Scan every inbound business email for spoofed senders, supplier BEC and fake tax notices. Connect your mailbox or paste an email, and get a verdict in under 3 seconds.

A supplier you have paid for years emails a fresh invoice with “our bank account has changed, please use the new NEFT details.” The domain looks right. The signature looks right. The money goes to a fraudster. Business email compromise and phishing are now among the costliest email threats facing Indian SMEs, because a single convincing message can redirect a real payment, and most inboxes let it straight through.

ScamShield AI reads the things a busy accounts team misses. It scores every incoming email against 12 India fraud categories, catches the spoofed domain, the changed bank account and the urgency pressure, and warns you before the payment leaves your bank.

What it checks on every email

Domain & sender spoofing

Spoofed sender domains and lookalike addresses that are one character off the real thing, plus display-name spoofing where the name reads correctly but the underlying address does not, are flagged before you reply.

Supplier BEC & payment-change fraud

Forged supplier emails that quietly change the NEFT or bank account in a payment instruction are caught. Business email compromise is scored as high risk when a changed account meets urgency to pay today.

Fake tax & government notices

Fake GST notices, forged income-tax demands and other government impersonation emails that pressure you into paying a penalty or clicking a link are matched against known India fraud patterns.

Malicious links & credential phishing

Credential-phishing links that mimic banks, wallets and portals to steal a login are checked, so a staff member never hands over a password on a fake sign-in page.

A real verdict, in plain English

Illustrative example of the engine’s output on a forged supplier invoice email.

HIGH RISK · 88/100 Category: Supplier BEC (CAT-10)

The sender domain is a lookalike of your real supplier, one character off the genuine address.
The email changes the NEFT bank account in the payment instruction to a new, unverified account.
There is urgency pressure to pay today, a classic tactic to rush the transfer before anyone checks.

✓ Verdict in < 3 seconds ✓ Email body not stored

How to use it

Connect Gmail or paste an email

Connect Gmail, Microsoft 365 or Zoho in a few clicks, or simply paste a suspicious email into the scanner. No IT team, no mail server changes.

Every email is scored automatically

The ScamShield AI model reads each incoming email against 12 India fraud categories in real time, checking sender, domain, links and payment details.

Get an alert before you act

Threat alerts arrive by email and in your dashboard with a risk score, the fraud category and a plain-English reason, before you reply or release a payment.

Phishing email scanner FAQs

How does ScamShield AI catch a spoofed supplier email?

It reads every inbound email against 12 India fraud categories. It flags a sender domain that is a lookalike of your real supplier (often one character off), display-name spoofing, a changed NEFT bank account in the payment instruction, and urgency pressure to pay today. When these signals stack up, the email is scored as high risk with a plain-English reason, so your accounts team sees the danger before releasing a payment. A verdict returns in under 3 seconds.

Do you store my emails?

No. In line with India’s DPDP Act 2023, the email body is processed in memory and is never written to the database. Only metadata such as the subject line and a masked sender address is retained, for up to 90 days, so you can locate a flagged message. The content of your email is not stored.

Which mailboxes can I connect?

You can connect Gmail, Microsoft 365 and Zoho Mail. Once connected, every incoming email is scanned automatically. If you prefer not to connect a mailbox, you can also paste a suspicious email into the scanner for a one-off check.

Which plans include the phishing email scanner?

The phishing email scanner is available on both the Starter and Professional plans. Start with a 30-day free trial. No card required.

Stop a fake invoice before you pay it.

Connect your mailbox or paste any suspicious email free during your trial. Verdict in seconds.

Start free trial Book a demo

✓ 30-day free trial ✓ No credit card ✓ Data stays in India