How to reduce online fraud risk with a one-minute email check
Romance scams, marketplace fraud, fake recruiters, rental cons — the same minute-long email check that screens a date also screens anyone asking you to send money, click a link, or share an ID.
Published 2026-05-17 · 6 min read · CheckMate Blog
Online fraud is rarely sophisticated. The successful version of it almost always relies on the same trick: get the target to make one important decision — send money, click a link, share a document, ship a parcel — before the target has any independent information about the other party. Most defences against fraud are about adding one piece of independent information back into the moment. This guide walks through the cheapest, fastest version of that defence: the one-minute email check.
The patterns have not changed much in a decade; the volume has. Reported losses to online scams now run into double-digit billions of US dollars per year in FTC numbers alone, with the largest single category being romance-and-relationship fraud, followed by marketplace and rental scams, employment fraud, and impersonation scams targeting older adults. The common thread is a stranger you have only met online, asking for money or trust before you have any way to verify them.
- Romance scams: the long-running 'overseas partner who needs help with a customs fee' pattern, plus the newer pig-butchering variant that moves the target onto a fake crypto-investment platform after weeks of relationship-building.
- Marketplace and rental fraud: a 'landlord' on Craigslist or Facebook Marketplace renting an apartment they do not own; a 'seller' on eBay or a forum offering a high-value item below market.
- Recruiter and job-offer fraud: a hiring manager from a real company that does not actually employ them; the goal is usually to extract an ID document, banking details, or 'training equipment' fees.
- Inheritance, lottery, and government-impersonation fraud: the lowest-effort version of online scams, still effective because the targets are often older or non-native speakers being pushed to act quickly.
- Personal-side business-email-compromise: a 'lawyer' or 'accountant' contacting you about a relative's estate, a deal, or a tax issue you cannot easily verify.
Every one of these starts with an email address — the one they used to reach you, the one on the marketplace listing, the one on the job-offer letter, the one in the dating-app message thread. That email is your check.
- Paste the counterparty's email into checkmate.bio. The free scan runs in under a minute and returns category counts — how many social, professional, dating, finance, and other accounts the email is linked to.
- Read the shape. A real person doing legitimate business has a footprint — social accounts, a professional presence, a few free-trial and retail sign-ups. A scammer's freshly-minted email usually has almost nothing on it because the address itself is new.
- If the shape is plausible, unlock the detailed report and check three things. First, does the display name across recovered profiles match the name they gave you? Second, does the public profession or location line up with what they claimed? Third, are the most-active accounts old enough to predate when they could have set them up for the scam?
- If anything looks wrong, stop. Do not send money, do not share an ID, do not click an attachment, do not move the conversation to a side channel they suggest. The cost of a false positive is one missed transaction; the cost of a false negative is the money or document you cannot get back.
- The email is younger than the relationship. A 'partner' you have been talking to for three months whose email address shows up on zero pre-2026 services has not been who they said they were for those three months.
- Name mismatch. The detailed report's recovered display names contradict the name in their messages or on their ID photo.
- Reverse-image-search hits. Their profile photo appears on someone else's social media or on a stock-photo site. This is the single fastest catfish-or-scam signal you can collect and it costs nothing to check.
- Profession contradicted by footprint. They claim to be a US-based oil-rig engineer (a very common romance-scam claim); the detailed report finds them on consumer services tied to a completely different country.
- Heavy presence on flagged platforms. A 'recruiter' whose email is registered on multiple 'crypto investment' or 'forex trading' platforms is a different signal from a recruiter with a Slack and a Notion account.
- Pattern of duplicates. The detailed report sometimes surfaces multiple accounts on the same platform under different handles — a footprint of someone who has been rotating identities.
A footprint check is a screen, not a verdict. Treat it the same way you would treat a credit check or a reference call: useful evidence, not the whole picture.
- It cannot prove someone is honest. Fraudsters with older email addresses exist, and a clean report does not authorize you to send the money.
- It does not access bank records, criminal history, or anything outside the open web and breach-derived data. For licensed background checks, use an FCRA-compliant vendor — not a footprint tool.
- It cannot validate the content of an offer or listing. A real Craigslist landlord with a clean footprint can still be renting out an apartment they do not own; do not skip the in-person visit or the title check.
- It will not save you if you ignore what it finds. Most fraud victims with a clean check skipped the check. Most fraud victims with a flagged check ignored the flags. The check only helps if you stop when it tells you to stop.
A handful of scenarios should trigger the email check no matter how comfortable you feel about the counterparty:
- Any request to send money to a stranger, even a small first transaction described as a 'test' or a 'fee.'
- Any request to share a photo of an ID, a passport, or a financial document.
- Any rental, property, or vehicle deal where you have not met the other party in person and verified ownership through public records.
- Any job offer that asks you to buy equipment, ship goods, or accept funds for forwarding ('payment-processor' fraud).
- Any request to move a conversation off the original platform (dating app, marketplace, LinkedIn) onto a private channel they propose, before you have verified them independently.
Most online fraud is defeated by adding sixty seconds of independent information before the irreversible decision. The email-driven check is the cheapest version of those sixty seconds.
If you sent money or shared documents and now suspect fraud, the priority is not the email check — it is reporting. In the US: FTC at reportfraud.ftc.gov, FBI's IC3 at ic3.gov for higher-value losses, and your bank's fraud line immediately if a transfer can still be reversed. In the UK: Action Fraud at actionfraud.police.uk. In the EU: your national consumer-protection authority and your bank. The email check then becomes a habit for the next time — both as evidence in the report and as a discipline so the same scam does not work twice.
CheckMate.bio groups findings into categories (social, gaming, dating, adult, finance, professional, and more) and attaches a confidence score to every match. A score of 80% or higher means the email is almost certainly linked to that service. A score between 50% and 80% is a likely match. Anything below 50% lands in the 'Possible matches' section and should be treated as a weak signal, not a verdict.
- Categories show the kind of accounts that exist — the shape of someone's online footprint.
- Per-service fields (usernames, display names, bio text, last active dates) help you confirm whether the match is really the person you care about.
- Confidence scores help you separate solid matches from noise. Treat low-confidence hits as leads to investigate, not as proof.
CheckMate.bio indexes public and breach-derived data. It does not grant access to private messages, passwords, or anything you wouldn't be able to find with enough patience and the right search queries. Use it for the same reasons you'd Google someone — safety, due diligence, re-connecting with people, or simply knowing what a public profile says about you. Be honest about your reasons, and respect the answer you get.