Do you store the email?

No. The text is checked and discarded. It is not logged. An anonymous counter may increase by one.

Can this say an email is definitely a scam?

No. It is a heuristic. A quiet result is not proof the message is genuine, and a warning is not a legal finding.

What does the DNS check prove?

Only that the sender domain publishes MX, SPF or DMARC. A published record does not prove that SARS, a bank or any other organisation sent the message.

Tools · Everyday

Is this email a scam?

Paste the message, including the From line. We look for pressure, odd payment requests and a sender that does not match a South African brand, then check public DNS for that domain. The message is not stored.

How to use it

Paste the email, including the From line. Add the sender separately if the header was stripped.
Read the grade and the notes. High means treat the message as hostile until you have checked it another way.
For SARS, eFiling or a bank, open the site yourself. Do not use a link or a phone number from the mail.

Questions

Do you store the email?: No. The text is checked and discarded. It is not logged. An anonymous counter may increase by one.
Can this say an email is definitely a scam?: No. It is a heuristic. A quiet result is not proof the message is genuine, and a warning is not a legal finding.
What does the DNS check prove?: Only that the sender domain publishes MX, SPF or DMARC. A published record does not prove that SARS, a bank or any other organisation sent the message.

An automated client can POST JSON to /api/tools/email-scam with text. The OpenAPI document is at /api/tools, with a short guide at /llms.txt. Nothing submitted is stored.

Confirm SARS and bank messages by signing in yourself. This check does not contact those organisations, and it does not decide that a message is safe.