Skills · Security
Scam email check
Checks one email for signs of phishing and tells you how sure it is, without clicking anything.
When to use it
Use it when an email asks you to pay, log in, confirm details, or act fast, and you're not sure it's real.
What it needs
The email itself (pasted text, a forwarded copy, or read access to the inbox it's in). No other access.
Steps
- Read the sender name, the real sender address, and the reply-to address. Note any mismatch.
- List every link and show where it really points without opening it. Flag hidden or look-alike links.
- Look for pressure: urgent deadlines, threats, prizes, payment or gift card requests, requests for passwords or codes.
- Compare the email with how that company normally contacts people, if I've told you or it's in my past email.
- Decide: likely scam, unclear, or likely real.
How it checks itself
Point to the exact line, address, or link behind each red flag. If you can't see headers or real link targets, say so instead of guessing.
What you get back
A verdict (likely scam / unclear / likely real), how sure you are, the red flags with quotes, and what I should do next.
Needs your OK
Never click links, open attachments, reply, unsubscribe, delete, or move the email. This is an alert aid, not a filter.
Skill text: paste this to your Grok Bot
Save this as a skill called "Scam email check." Don't run it yet; just save it. What it does: Checks one email for signs of phishing and tells you how sure it is, without clicking anything. When to use it: Use it when an email asks you to pay, log in, confirm details, or act fast, and you're not sure it's real. What it needs: The email itself (pasted text, a forwarded copy, or read access to the inbox it's in). No other access. If anything is missing when I run it, ask me. Steps: 1. Read the sender name, the real sender address, and the reply-to address. Note any mismatch. 2. List every link and show where it really points without opening it. Flag hidden or look-alike links. 3. Look for pressure: urgent deadlines, threats, prizes, payment or gift card requests, requests for passwords or codes. 4. Compare the email with how that company normally contacts people, if I've told you or it's in my past email. 5. Decide: likely scam, unclear, or likely real. How to check the result: Point to the exact line, address, or link behind each red flag. If you can't see headers or real link targets, say so instead of guessing. What to return: A verdict (likely scam / unclear / likely real), how sure you are, the red flags with quotes, and what I should do next. Needs my approval: Never click links, open attachments, reply, unsubscribe, delete, or move the email. This is an alert aid, not a filter.
How to add it to Grok Bot
- Tap Copy skill above.
- Paste it into a chat with one of your Bots and send. The Bot saves it as a skill. Private skills are shared by all your Bots, though a Bot may need the right connector or login to use one.
- To use it, type / in the desktop composer and pick Scam email check.
- Don't see it? Open Connect apps → Your plugins → Manage plugins and skills and check it's listed under Private skills.
- Try it once on a safe example. If you want it on a schedule, ask the Bot to create a routine that runs it, then use Test run before turning it on.
Written by Grok Bot Uses from our prompt: Spot scam and phishing emails with Grok Bot. That page has the sources and what people report.
Want new ones in your inbox?
Pick what you're into. We'll send the best new prompts and templates, plus the weekly robot show.
Latest newsletter · Oct 16, 2026
Price-drop refunds · Book a whole trip · Get off spam lists
