Yes, ChatGPT can help you check whether an email is a scam, and the final decision always stays with you. Copy the wording of the message, paste it into ChatGPT, and ask it to list the warning signs. It explains, in plain English, why the email looks suspicious and what to check for yourself before you do anything. The whole thing takes about three minutes.
Scam emails are harder to spot than they used to be. The old advice, "look for spelling mistakes," doesn't hold anymore, because scammers now use AI to write clean, polite, convincing messages. Phishing, the fake email that pretends to come from your bank, Amazon, or a delivery company, remains one of the most reported internet crimes in the FBI's 2025 Internet Crime Report. The good news: the same technology that writes those emails can help you take them apart, calmly and for free.
How do I check a suspicious email with ChatGPT?
You copy the text of the email, paste it into ChatGPT, and ask for the warning signs. That's the whole method. You never click anything inside the email itself, and you never forward it to anyone. Here it is, step by step.
- Don't click, don't reply, don't download. Leave the email exactly as it is. An email just sitting in your inbox can't hurt you.
- Copy the text of the message. On a computer, drag your mouse across the text and press Ctrl+C (Command+C on a Mac). On a phone, press and hold a word, drag the handles to select the whole message, and tap Copy.
- Open ChatGPT. Go to chatgpt.com or open the app. You'll see a simple screen with a message box at the bottom. If you've never used it, the guide ChatGPT for Beginners walks you through the free signup.
- Paste the email and ask. Tap the message box, paste, and add a question like the one below. Then press Enter or tap the arrow.
- Read the answer for warning signs, not for a verdict. ChatGPT names what looks off, one point at a time. Your job is to understand the signs, not to obey a yes or no.
Here's a question you can copy word for word:
I received this email and I'm not sure it's real. Please list the warning signs that suggest a scam, explain each one in plain English, and tell me what I should check for myself before doing anything. Here is the email: (paste the email here)
- 1Your question, with the email pasted below it
- 2ChatGPT names the warning signs and explains each one
What should I paste, and what should I never paste?
Paste the wording of the email and the sender's full address. That's all ChatGPT needs. Never type your own passwords, verification codes, account numbers, or Social Security number into the chat. The check doesn't need them, and no legitimate check ever will.
One tip that pays off: the sender's display name can say anything, even "Amazon Billing." What counts is the actual address behind it. On most phones and email programs, tapping the sender's name, or hovering over it with your mouse, reveals the full address. Type that address into ChatGPT along with the message, and ask whether it matches the real company.
How do I read ChatGPT's answer?
Look for the named warning signs, then check each one against the email yourself. The classics: manufactured urgency and deadlines, a sender address that doesn't match the company, a generic greeting like "Dear customer," a link that leads somewhere odd, and any request for payment details or codes. The FTC's consumer site tracks the same patterns across the current schemes.
You'll notice ChatGPT rarely says "this is definitely a scam." It says "this looks like" and "I would be careful." That's not a weakness. That's honesty, and it's the right way to hold the answer. Here's the kind of email you're judging, with the signs marked:
- 1The made-up deadline. Real companies don't give you 24 hours to panic
- 2The address is not amazon.com. Look closely at what comes right before ".com"
If the email claims to come from a company you actually use, one move settles it: contact the company yourself. Call the number on your card or statement, or type the company's website address into your browser by hand. Never use the link or the phone number in the email.
What about the Malwarebytes and Norton scam checkers inside ChatGPT?
They're real, and they're worth knowing about. Since early 2026, the security companies Malwarebytes and Norton have offered official scam-checking apps that run inside ChatGPT. You type @Malwarebytes in the message box, paste the suspicious message, and ask whether it's a scam. They work on the free plan.
Use them the same way you use ChatGPT itself: as a second opinion, not a verdict. The method in this guide works with or without them, and it teaches you something the apps don't: how to recognize the warning signs yourself, so you're not dependent on any tool being available.
What does ChatGPT get wrong?
ChatGPT only sees the text you paste. It can't open the link to see where it really leads, it can't scan an attachment, and it can't verify that the sender's address is genuine. It judges wording, nothing more. A polished, professional email can still be a scam, and a clumsy email from your dentist's office can be perfectly real. It can also sound more confident than it should.
So keep the one rule that covers every gap: when money, passwords, or your accounts are involved, verify with the company directly, through contact details you look up yourself. And know which guide you need. If the "email problem" is actually a pop-up on your screen telling you to call a number, that's a different scam with its own first-aid steps: see the tech support pop-up guide. For suspicious text messages, the same paste-and-ask method works, and How to Spot a Scam Text with ChatGPT covers it.
If you'd rather talk it through with a person, the AARP Fraud Watch Network runs a free helpline at 877-908-3360.
What if I already clicked or replied?
Stay calm. Clicking a link, by itself, is usually not the disaster it feels like. If you didn't enter anything on the page, close it and move on. If you typed a password, change that password now, starting with your email account if you reuse it anywhere. If you gave card or bank details, call your bank at the number on your card and tell them what happened. Reporting the email to the FTC at ReportFraud.ftc.gov helps track the schemes that are circulating right now.
You'll find guides for every kind of suspicious message in our scam protection library.
The five rules worth keeping
- Never click links or open attachments in an email you didn't expect.
- Paste only the email's wording into ChatGPT, never your own passwords or account numbers.
- Treat ChatGPT's answer as a second opinion. The decision stays yours.
- When money is involved, contact the company through details you look up yourself, never the ones in the email.
- Real companies don't rush you. Scammers create urgency.
Checking emails calmly is a skill, and it gets easier with practice. The course AI for Real Life practices exactly this, step by step, on realistic examples, at your own pace.