JatzoCyber Security Menu

WHAT JATZO CATCHES

The scores, and what moved them.

Five emails, put through the same checks as yours. Every score and reason below is what Jatzo really returns.

Try the interactive demoHow the analysis works

Supplier invoice

Updated bank details for invoice 4471

From Pellowmere Supplies, accounts@pellowmere-billing.example

Email risk score
100/100 Risk gradeVery high risk

Multiple strong indicators suggest this email may be phishing or malicious. Do not click links, open unexpected attachments, or provide sensitive information until independently verified.

What it wantsGet you to send money or change payment details

Top reasons for this score

  • +28Payment change with a warning sign

    A bank change with replies routed elsewhere or a phone call discouraged is how a hijacked mailbox diverts money.

  • +22DMARC failure reported

    The domain in the From line did not authorise this message.

  • +16Supplier payment details changed

    A change to supplier bank details is the main step in invoice fraud.

and 4 more findings in the full result

Recommended action

Do not send money or change payment details from this email alone. Verify the request using a trusted contact method you already have.

Microsoft sign-in

Unusual sign-in activity on your account

From Microsoft 365, account-security@micros0ft-account.example

Email risk score
91/100 Risk gradeVery high risk

Multiple strong indicators suggest this email may be phishing or malicious. Do not click links, open unexpected attachments, or provide sensitive information until independently verified.

What it wantsGet you to sign in or reveal account access

Top reasons for this score

  • +22Possible brand impersonation

    A known brand's name from a domain it does not use, with signs of disguise, is impersonation.

  • +18An impersonated brand warns about your account

    A fake warning about your account from a brand that did not send it is how account takeover starts.

  • +10Account security alert lure

    Alarm about your account is used to rush you into signing in on a copied page.

and 6 more findings in the full result

Recommended action

Do not use the supplied sign-in path. Open the real service independently and check your account there.

Everyday message

Notes from Tuesday's planning meeting

From Sam Patel, sam.patel@yourfirm.example

Email risk score
1/100 Risk gradeLow risk

The available checks did not find significant phishing indicators. This does not guarantee the email is safe.

What was checked

  • SPF: pass for yourfirm.example (the envelope sender)
  • DKIM: pass for yourfirm.example (the signing domain)
  • DMARC: pass for yourfirm.example (the From domain)
  • Links: none in the message
  • Attachments: none
  • Requests: nothing asking you to sign in, pay or open a file

Recommended action

Treat unexpected links, attachments and requests cautiously and verify the sender independently before acting.

Parcel redelivery

We could not deliver your parcel

From Parcelwise Delivery, no-reply@parcelwise-redelivery.example

Email risk score
34/100 Risk gradeSuspicious

The email contains indicators that deserve investigation. Check the sender, destination domains, authentication evidence and context before taking action.

What it wantsGet you to open, review or act on a delivery or document

Top reasons for this score

  • +18A parcel held for a fee, from a sender the courier does not use

    A small fee to release a parcel is how card details are taken; check the parcel on the courier's own site.

  • +8Delivery or customs lure

    Fake parcel notices are used to take card details or a sign-in.

  • +7Urgency or pressure language

    Time pressure is used to stop people checking before they act.

and 1 more finding in the full result

Recommended action

Open the relevant service independently rather than using an unexpected document or delivery link.

Gift card request

Quick favour

From Chris Walker, chris.walker.office@freemail.example

Email risk score
50/100 Risk gradeHigh risk

Multiple strong indicators suggest this email may be phishing or malicious. Do not click links, open unexpected attachments, or provide sensitive information until independently verified.

What it wantsGet you to carry out a business request

Top reasons for this score

  • +36Asked to buy gift cards and send the codes

    Gift card codes are spent the moment somebody has them, and nothing genuine asks for them by email.

  • +14Business email compromise pattern

    This wording matches payment diversion, gift card and boss impersonation fraud.

Recommended action

Verify the request using a known contact route before changing payment details, sending money, buying gift cards or releasing business information.

QR codes. A link you cannot hover over.

A code in a message hides where it goes. There is nothing to hover over, nothing to read before you commit, and the phone that opens it is usually not the device your protection is on. Jatzo reads the code and tells you where it leads before you point anything at it.

  • Read out of attached and inline pictures, the first three pages of a PDF, and the pictures inside an attached Office document.
  • The destination is checked like any other link, and the result says it came from a code.
  • Jatzo says plainly when a code is the only way to act on a message, which is how this attack is usually built.
  • On every plan, Free included. The paid plans add which file the code was in and how much of it could be read.
  • Staff can practise spotting a QR scam in the QR code phishing training module.
What Jatzo can and cannot read

Are these real emails?

The messages are written for the demonstration. The scores, the grades and the reasons are not: they are what the engine returns when it is given them, stored from a real run and refreshed whenever the rules change.

Why is one of them low?

Because most email is ordinary. A checker that calls everything a threat teaches people to ignore it, so the one worth showing is the message Jatzo leaves alone.

Is a low score a guarantee?

No. Automated analysis can be wrong, and missing evidence is not proof of safety. Verify important requests through a route you trust.

How Jatzo handles your email

See what it makes of yours.

Check an email and read the same evidence for yourself.

Create accountJatzo for business