What an email lookup can tell you

A familiar display name is not the email address. Copy the address itself, inspect the domain after the @ sign, and check for spelling differences. If you use Smart Paste, review the extracted fields before searching. Leave out the message body, passwords, payment details and unrelated people.

ContactCheckup researches public pages associated with the contact details you submit. It does not test mailbox access, prove who sent a message, or verify that an address is active.

An exact address on a company contact page is a different observation from a person with a similar name on a directory. If the report includes a website or source reference, open the original page and find the same address yourself. Check the publisher and any date. When no source is supplied, verify the claim independently rather than assuming the summary establishes a match.

For example, “this page lists the submitted email” describes evidence. “The sender is definitely that employee” goes beyond it. Even a relevant page cannot establish who controls the inbox today.

The FTC advises contacting a company through a phone number or website you already know is real when a message may be phishing, instead of using the contact details in that message. A lookup result should not be the reason you open an unexpected attachment or send money.

If a report says no public footprint was found, treat that as a gap in the available information. The report may still include a numeric risk score; that AI estimate does not prove the address is safe, fraudulent or newly created. Read the confidence explanation and confirm important requests through a trusted channel. Save only the information you need for a legitimate purpose.