How to Check If an Email Address Is Real (Without Emailing It)

Judging a message is one problem. Judging an address is a different one: someone has given you a contact, or you found one on a website, and you want to know whether a real mailbox is behind it before you trust it or send anything to it.

The obvious approach — send a test email and see if it bounces — is the one to avoid. A bounce tells you very little, and it tells the other side that your address is live, which is exactly what a scraper or a scammer wants to learn. Everything below works without contacting the address at all.

1. Check the domain, not the mailbox

Everything after the @ is the part that is hard to fake and easy to verify. Three questions:

• Does the domain exist and resolve? A domain with no DNS at all cannot receive mail, full stop.
• Does it have mail servers? A domain with no MX records is not accepting mail, however real the website looks.
• Is it a lookalike? Read it character by character, right to left. In acme.com.billing-secure.net, the real domain is billing-secure.net.

2. Look at who actually runs the mail

Most domains do not run their own mail — they point at Google Workspace, Microsoft 365 or a hosting provider. That is normal and informative: a serious company whose domain has no professional mail provider behind it is worth a second look, and a “bank” whose address is on a free consumer provider is not a bank.

3. Check whether the domain authenticates its mail

SPF, DKIM and DMARC are the records a domain publishes so receiving servers can tell genuine mail from forgeries. A real, established organisation almost always publishes them. A domain with none is either brand new, carelessly run, or set up for a campaign that will not be around long enough to care.

4. Check whether the mailbox itself exists

Mail servers can be asked whether an address is deliverable without sending anything. The answer is not always definitive — plenty of domains are configured to accept everything and discard it later, which is called a catch-all — but a clear rejection is a strong signal, and a catch-all result is itself worth knowing.

The free check here runs all four of the steps above at once and reports what it finds:

5. See whether the address has any history

A real person’s address usually leaves traces: accounts on services, an old forum post, a profile photo attached to the account, appearances in known data breaches. An address with no history anywhere, on a domain registered three weeks ago, is behaving like something created for one purpose.

Start with a quoted search of the full address and of the username on its own. For the account side, a reverse email lookup shows which services an address is registered with and what name and photo are attached to it, without notifying the owner.

Reading the result honestly

• Real domain, professional mail provider, authentication in place, mailbox deliverable, visible history. As good as this gets. The address is real and in use.
• Everything checks out but the address has no history. Common for new business addresses and for privacy-minded people. Not damning; not reassuring either.
• Disposable or throwaway provider. Fine for a newsletter signup, a real warning for anything involving money or identity.
• New domain, no authentication, no history. Treat as untrusted until something else proves otherwise.
• Domain does not resolve, or the mailbox is rejected. The address cannot receive mail. Whoever gave it to you either mistyped it or did not want to be reachable.

What none of this proves

A deliverable address on a well-configured domain tells you the mailbox is real. It does not tell you the person behind it is who they claim — real accounts get compromised, and anyone can register a tidy domain. When money, credentials or an identity claim are involved, the verification that matters is still a call to a number you found yourself, and, if the message itself is the worry, the checks in is this email legit?

Frequently asked

How do I check if an email address is real?

Verify the domain resolves and has mail servers, see which provider runs its mail, check whether it publishes SPF and DMARC records, and test whether the mailbox is deliverable. The free check on this page does all four without sending anything to the address.

Can I check an email address without sending a test email?

Yes, and you should. A test message tells the other side that your address is live and monitored, which is exactly what scrapers and scammers want to confirm. Domain, provider, authentication and deliverability can all be checked without contacting the address.

What does a catch-all result mean?

The domain is configured to accept mail for any address, so the server will not say whether that specific mailbox exists. It is a common setup and not suspicious in itself — it simply means the deliverability check cannot give a definite answer.

Does a real email address mean the sender is trustworthy?

No. It means a mailbox exists. Legitimate accounts get compromised and anyone can register a well-configured domain, so an identity claim still needs verifying through a channel you found yourself.