Checker
Check a domain
The same check as the front page, with the manual steps written out.
The check runs in your browser against the published register of nine official domains. Nothing you type is sent anywhere.
Four steps
Checking by hand
- 1. Take the domain only
- In an email address, the domain is everything after the @. In a web address, it is the part between :// and the first /. Ignore the display name entirely; it is chosen by the sender.
- 2. Read it right to left
- The real domain is the last two or three labels: secure-credicorp.co.uk.example.com belongs to example.com, not to the estate, however it starts.
- 3. Compare against the register
- The nine official domains are listed at /official-domains/. Subdomains of credicorp.co.uk and creditcorp.co.uk, such as clients.credicorp.co.uk, are official; near-misses are not.
- 4. When in doubt, report
- Send the message to [email protected] and wait for confirmation before acting.
Reading results
What the verdicts mean
In the register: the domain is one of the estate's nine, or an official subdomain of the lender's domains. That verifies the domain, not the message; a genuine domain can still be spoofed in the display name.
Lookalike: the domain is not official but closely resembles an official name. These are the ones fraud is built on, and the estate wants to hear about them.
Not in the register: the domain is simply not part of the estate. If it claims to be, report it.