JatzoCyber Security

Cybersecurity for the threats that reach your people.

Check suspicious emails. Spot requests to pay somewhere new. Watch the domains attackers use. A second opinion, alongside your existing security.

Check an email freeJatzo for business
OutlookSearch your inboxAM
HomeViewHelpReplyForwardCheck this email
New mailDrafts 2Sent itemsArchiveDeleted itemsFAVOURITESTeam updatesProjects

Updated bank details for invoice 4471

BSBrindlewood Suppliesaccounts@brindlewood-billing.exampleTo: Alex Morgan09:41

Hello Alex,

Our bank details have changed. Please pay invoice 4471 to our new account today to avoid a late payment fee, and update your records for future payments.

View the invoice and the new details: https://brindlewood-invoices.example/view/4471

Please confirm once the payment has been sent.

Kind regards, Accounts team

JatzoIs this email safe?

This verdict is for: Updated bank details for invoice 4471

Do not click any links, open attachments or reply to this email.

Email risk score
100/100 Risk gradeVery high risk

Get you to provide personal or financial information

Multiple strong indicators suggest this email may be phishing or malicious. Mainly: payment change with a warning sign.

Technical details
Illustrative view of Jatzo in Outlook. The emails are fictional; the scores and wording are what Jatzo returns for them.

Jatzo helps with the message that still makes somebody hesitate.

It sits after your filtering has had its turn, on the message that arrived because nothing about it was technically wrong. Keep whatever protects your inbox today.

  • No mail migration
  • No MX change or redirection
  • No gateway to replace
  • 5 free checks each month
  • No technical skills needed
  • Every result explained
  • Raw email not kept in case history

Look after a business? Check free whether anybody can send email as your domain

Protect. Monitor. Train. Prove.

Help your people handle threats, watch for exposure around your business, and show what you are doing about it. Jatzo is the platform. The tools under it are modules, and which ones you have depends on your plan.

  • Protect. A second opinion, where the message is

    Give your team a second opinion on suspicious messages, with clear evidence and a practical next step.

    Email Threat Analyser on the website, every plan. In Outlook and Gmail from Personal, with shared cases for a team.

    How the analyser works

  • Monitor. What reaches you, and what changes around you

    Watch your domains for spoofing weaknesses and lookalikes. Understand the threats reaching your people.

    The organisation threat report with Business. Domain Watch with Business Pro.

    What monitoring covers

  • Train. The decisions, practised beforehand

    Help staff recognise the warning signs and practise the decisions that matter.

    Jatzo Training, its assessments and certificates, with Business Pro.

    Explore the training

  • Prove. A record you can hand over

    Keep a record of your checks, training and activity, with reports and a dated proof pack.

    PDF reports from Personal. Activity records, exports and the dated Proof Pack with Business Pro.

    What each plan includes

The Invoice Fraud Checker belongs to the same family and is sold on its own: a separate Windows licence, never part of a subscription here. About invoice checks

£1.28 billion was lost to payment fraud in the UK in 2025, up 4 per cent on 2024.

  • £576.4 millionof it was authorised push payment fraud: money somebody was persuaded to send, up 19 per cent on 2024.
  • £75.6 millionof that left business accounts rather than personal ones, down 11 per cent on 2024.

Some of that money left because somebody believed an email. We look at the email.

Figures for 2025 from the UK Finance Annual Fraud Report 2026.

The scale of the problem, in figures

Fits the way your team works.

  • Outlook and Gmail, on desktop, the web and phones
  • Sign in with Microsoft
  • Raw email not kept in history
  • No generative AI reads your email

Check. Understand. Act.

  1. Check. A second opinion, without leaving your inbox.

    A strange invoice. An unexpected login link. Check it with Jatzo in Outlook or Gmail, where you are reading it, or on the website.

    Where Jatzo works

  2. Understand. The evidence, not just a warning light.

    A score out of 100, then what raised a concern and why it matters, in plain English, with the technical detail there when you want it.

    Try it on a real lure

  3. Act. Know your next move.

    Every result ends with what to do next, so nobody has to become a security expert to handle a suspicious email well.

    Built for your whole team

169detection rules

Every rule declares what it is evidence of.

Before a rule can score anything, it says which question it answers. That is how a marketing email and an attack on your money are kept apart.

  • 144

    Threat

    Evidence that a message wants credentials, money or access. Only this can raise a message to High risk.

  • 20

    Nuisance

    Spam and marketing, scored on a channel of its own. Never enough, alone, to call something phishing.

  • 5

    Uncertainty

    What could not be checked. Said plainly, and scores nothing in either direction.

What Jatzo catches

The dangerous emails do not look dangerous.

A message designed to fool you is built to look ordinary. Here are four that reach ordinary inboxes, and every one of them arrives looking like routine admin.

The invoice you were half expecting

A bill arrives for work that sounds plausible. Paying it sends your money to someone else entirely.

The login request that creates panic

Someone has accessed your account, sign in to secure it. The sign-in page is theirs, and now so is your password.

The parcel that needs a small fee

A delivery is held pending a tiny charge. The amount is trivial, which is the point. What they want is the card number.

The supplier who changed bank details

A familiar contact sends new account details before an invoice is due, and the next payment goes to somebody else.

What Jatzo reads in a QR code

INVOICE FRAUD CHECKER

Check the bank details before you pay.

A Windows program that keeps the bank details you have confirmed for each supplier. When an invoice asks you to pay somewhere new, it says stop, and says why. It runs on your own computer, and your suppliers' bank details are never sent to Jatzo.

  • Personal£129 a yearUp to 2 devices and 5 clients
  • Pro£399 a yearUp to 10 devices and 15 clients
  • Pro+£799 a yearUp to 30 devices and 30 clients

A separate yearly licence, not part of a Jatzo subscription.

See how it checks an invoiceCompare the licences
Invoice 4471 from Acme Supplies Ltd, checked before it is paid
On this invoiceConfirmed
Sort code20-00-00 New12-34-56
Accountending 7701 Newending 5432

Stop: do not pay this yet. Call Acme Supplies on a number you already have and confirm the new bank details first.

Can scammers pretend to be you?

The other half of email fraud is the mail sent in your name. If your domain does not tell receiving systems to refuse a fake, anybody can send an invoice from your address to your customers, and it will look exactly like you.

  • Answers in about ten seconds, for any business web address.
  • Looks only at settings that are already public, never at your mail.
  • Tells you what is wrong and what to ask for to put it right.

Free. No sign-up. Nothing to install.

We do not keep the email you check.

History keeps the subject, score and compact findings. It does not keep the raw email or attachment contents.

See what is kept and who can access it

Jatzo reads the message and its attachments to run the analysis, then releases them. The raw email, its contents and its attachments are not saved in your history. What is kept is the subject line, the score, the short list of findings and a few counts, such as how many links there were, so you can recognise a check later. In your history, links and senders are kept only as keyed fingerprints that cannot be read back, which is how Jatzo notices the same campaign returning. The detailed evidence behind a PDF report, such as the full links, is held in memory for up to 30 minutes and then deleted.

  • No raw email or attachment content stored
  • The message itself is never stored, so nobody is shown it. In a business team, the admin and moderators see each check's subject line, score and findings
  • Attachments are opened only inside an isolated worker, never run
  • No third-party advertising trackers
Security and privacy in fullRead the privacy notice

  • Processed for the check

    Jatzo reads the submitted message and supported attachments to produce the analysis, then releases them from application processing.

  • Findings kept in history

    History saves the subject, score and compact findings. It does not save the raw email or attachment contents. Subjects may contain personal information.

  • Restricted processing

    Supported uploads are processed in restricted workers. This reduces risk; it does not make an attachment safe to open on your own device.

  • No generative AI

    The current email engine uses programmed checks and scoring. It does not send your email to a generative-AI model for analysis.

Find what is wrong.

Tap anything in this email that looks suspicious. Then see what Jatzo found, including what nobody can see in an inbox.

Inbox08:12

Microsoft 365 <account-security@micros0ft-account.example>
To: Alex Morgan

Unusual sign-in activity on your account

Microsoft account

Unusual sign-in activity

We detected something unusual about a recent sign-in to the Microsoft account alex@yourfirm.example. To keep your account safe, sign in and review your recent activity within 24 hours, or your account will be locked.

Review recent activity: https://micros0ft-account.example/verify

Thanks, The Microsoft account team

Show Jatzo's answer
Top reasons for this score91/100 Very high risk

In the email you could see

  1. +22
    Possible brand impersonation

    A known brand's name from a domain it does not use, with signs of disguise, is impersonation.

  2. +10
    Account security alert lure

    Alarm about your account is used to rush you into signing in on a copied page.

  3. +6
    Credential-related language

    Talk of passwords or sign-in beside a request is how credential theft starts.

  4. +7
    Urgency or pressure language

    Time pressure is used to stop people checking before they act.

  5. +9
    Threat or consequence language

    Threats of closure or legal action are used to rush a decision.

  6. +5
    URL needs checking

    Something about the link is unusual enough to check before clicking.

Out of sight, in the sender and the headers

  1. +18
    An impersonated brand warns about your account

    A fake warning about your account from a brand that did not send it is how account takeover starts.

  2. +7
    DKIM signature could not be verified

    Without a signature nothing shows the message is unaltered or really from this domain.

  3. +7
    DMARC could not be verified

    Without it, nothing stops someone else using this From domain.

What to doDo not use the supplied sign-in path. Open the real service independently and check your account there.

A fictional email. Every reason, its points and the advice are what Jatzo returns for it. Open the full demo

Where one convincing email
can move real money.

FOR BUSINESSES

Give your staff a second opinion.
Give IT the evidence.

Law, accountancy, property and anybody whose finance team pays suppliers on emailed instructions. Staff get a practical way to question a message before they act on it, and whoever looks after your IT gets the findings behind it.

Explore Jatzo for business ↗︎

Check. Understand. Act.

FOR MANAGED SERVICE PROVIDERS

Your clients.
Your service. Our protection.

Add a service your clients can understand and your engineers can work with. Manage separate client organisations, each with its own records and its own activity log.

Explore the MSP partnership ↗︎

Spot it yourself, next time.

Short, practical lessons built around real situations, with feedback that explains every answer.

  • Phishing fundamentals
  • Protecting your work account
  • Invoice and payment fraud
  • QR code phishing
  • Social engineering
  • Suspicious attachments
See the coursesTry lesson one free

The first lesson is free. Every course is included with Business Pro.

A safer inbox, at every scale.

A team plan is billed per person, and the rate steps down as you add more. Prices are the total you pay, with no VAT added.

Business

Give a whole team the same answer, in the inbox they already use.

£8per person a month, from 2 people

Everyone signs in as themselves, one allowance shared across the team, and one place to manage it.

See the plan
RECOMMENDED

Business Pro

See what is reaching your people, and manage how it is handled.

£12per person a month, from 5 people

The whole training catalogue for everybody you add, a daily watch on your own domains, and a dated pack that shows what you do.

See the plan

Enterprise

Deployed and integrated around how your organisation already works.

Agreed with youfrom 50 people

Ask about your team

Just for you? Five checks a month are free, and Personal is £6 a month for Jatzo inside your own Outlook or Gmail. Compare every plan

Paying suppliers by bank transfer? The Invoice Fraud Checker is a separate licence, from £129 a year. What it checks

Make checking
your next move.