Shipping daily
Changelog →

Kolaboro / Tools / Payment email check

Got an email asking you to pay? Check who really sent it.

Paste the email from the developer or agent. You see where replies go, whether the sender domain looks like the developer's real website, what your email provider's authentication said, and the wording payment-diversion emails use.

Gmail: open the email, then More (three dots) > Show original > Copy to clipboard. Outlook: File > Properties > Internet headers, then add the body. Apple Mail: View > Message > Raw Source. Pasting only the visible text works too, with fewer checks.

Pick it to compare the sender with that developer's website in our records.

This email stays on your device. It is read in this page and never sent, stored or logged. Only the sender's domain name (for example example.com) is looked up in public DNS and registration records.

How it works

The headers are read in your browser: From, Reply-To, Return-Path, Sender, Authentication-Results (added by your email provider when the message arrived) and the Received lines.

The sender's domain and every link and address in the email are compared with the developer websites in our records: same name with another ending, lookalike letters, one or two letters changed, extra words.

For the sender's domain only, our server reads public DNS (SPF, DMARC, MX) over DNS-over-HTTPS and the registration date from RDAP. Nothing else from the email leaves your device.

No check can prove an email is genuine. A real mailbox can be hacked and send the right domain with the wrong account. That is why the call comes first.

Sources: developer websites from Kolaboro's named project data (list as JSON); DNS from Cloudflare 1.1.1.1 DNS over HTTPS; registration dates from RDAP. Also available in the Kolaboro X-ray browser extension for Gmail.

Check the account numberScore the payment plan
Protect my purchase