Check emails, links and files for phishing with AI. Open risky links safely in a sandbox. Gmail, Outlook, right-click any link.
Users
3
0 in 30 days
Rating
0.0 / 5
unchanged in 30 days
Ratings
0
0 in 30 days
Store rank
#337K
#263K among extensions
Version
1.4.2
updated 11 Oct 2026
Users
monthly, 4 months
Latest, 17 Oct 2026:3 usersMove the mouse over the chart for any month
Ratings count
monthly, 4 months
Latest, 17 Oct 2026:0 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About PhishScan — AI Phishing Detection
Stop phishing before you click. PhishScan checks suspicious emails and links with AI and a dozen reputation sources, then gives you a clear verdict — safe, suspicious or phishing — with a 0–100 risk score and a plain-language explanation.
WHAT IT DOES
- Check an email in Gmail or Outlook with one click — a "Check with PhishScan" button right in the message.
- Right-click any link → "Check with PhishScan" before you open it.
- Proactive inbox scanning (optional): risk dots next to unread emails before you open them.
- Warning before a risky click (optional): if a link's visible text shows one domain but leads to another, uses a look-alike domain or a raw IP, you're warned before the page opens. This runs locally in your browser.
- Popup checker: paste email text or a URL, or upload an .eml file.
HOW IT WORKS
PhishScan combines an AI model that reads the message for social-engineering cues with deterministic checks:
- URL reputation — VirusTotal, Google Safe Browsing, PhishTank, DNS blocklists
- Domain intelligence — domain age, DNS, SSL, hosting reputation
- Email authentication — SPF, DKIM, DMARC, sender-spoofing and reply-to checks
- Attachments — antivirus and YARA rules; on paid plans, suspicious files can be opened in an isolated sandbox
- QR-code phishing — decodes the link hidden in a QR image
- A screenshot of the page is rendered on isolated infrastructure, so the risky site never loads on your device
PRIVACY
By default, the full content of your checks is not stored after the check: your history keeps the verdict, the indicators found and a short excerpt. Full samples are kept only if you turn on sample saving (encrypted, up to 180 days). Files sent to the sandbox are opened in an isolated environment; only the report is kept. The pre-click warning works locally and sends nothing. Full policy: https://phishscan.io/privacy
REQUIRES A PHISHSCAN ACCOUNT
Connect with an API key from https://phishscan.io/account/api-keys. A free plan is available. Plans: https://phishscan.io/pricing
Questions: support@phishscan.io