Why do we need full email headers?
To investigate and help stop fraudulent or phishing emails, we first need the full email headers. Email headers contain technical information about how an email traveled to your inbox and can help us identify the true source of the message.
Without the full headers, we may not have enough information to investigate the email properly.
How to get full email headers in Gmail
- Open the suspicious email in Gmail.
- Click the three vertical dots (⋮) in the top-right corner of the email.
- Select Show original.
- A new page will open with the full email details.
- Click Download Original to save the information as a
.txtfile. - Attach the downloaded file when replying to us.
What information do email headers contain?
Email headers include:
- The route the email took to reach your inbox.
- Dates and timestamps.
- Information about the servers that processed the email.
- Security and spam-check details.
This information helps our team identify phishing attempts and take action against fraudulent emails.
Please note: The email content alone is usually not enough for an investigation. The complete headers are required to trace the source of the message accurately.