Get more from Phishivox.

1. Create your account

Visit phishivox.com/signup and enter your email and a strong password. You'll receive a verification email — click the link to activate your account.

2. Verify your email

Check your inbox (and spam folder) for the verification email from Phishivox. Click the link to confirm your address. You won't be able to scan emails until your account is verified.

3. Log in

Head to phishivox.com/login, enter your credentials, and you'll land on your Dashboard.

4. Start scanning

Navigate to Scan Email from the top navigation. Your current plan determines the available scan volume, analysis features, and history retention. View the live plan limits and price for your location on the Pricing page before upgrading.

Your dashboard is the central hub showing your scanning activity and account status.

What you'll see

• Monthly Stats — Total scans, phishing detected, suspicious, spam, and safe emails this month.
• Risk Level — An overall risk assessment (Low, Medium, High, Critical) based on the ratio of threats in your scans.
• Scan Quota — A progress bar showing how many scans you've used out of your monthly limit, plus any bonus scans.
• AI Analysis Quota — A separate bar showing AI-powered analyses used vs. your limit.
• Recent Scans — Your last 5 scan results with verdict badges (Safe, Suspicious, Phishing, Spam).
• Connected Mailboxes — Quick view of your Gmail and Microsoft 365 connections with connect/disconnect buttons.

Phishivox provides three ways to scan emails. Choose the one that fits your workflow.

Method 1: Upload .eml file (recommended)

The easiest and most accurate method. Download the suspicious email as a .eml file from your email client, then upload it.

• Gmail: Open the email → click the three dots (More) → "Download message"
• Outlook: Drag the email from your inbox to your desktop, or File → Save As → .eml
• Apple Mail: File → Save As → choose "Raw Message Source"
• Thunderbird: File → Save As → File (.eml)

Then go to Scan Email → Upload .eml, drag your file into the upload area (or click to browse), and hit Scan.

Method 2: Mailbox scan

Connect your Gmail or Microsoft 365 account (see Connecting Mailboxes), then browse your folders directly within Phishivox. Select one or more emails and click Scan.

• Browse all folders (Inbox, Spam, Sent, custom labels)
• Select multiple emails for batch scanning
• Results appear instantly in the right panel

Method 3: Manual entry

For quick checks when you have specific email details. Fill in the sender address, subject, email body, and optionally headers. Useful for testing or when you only have partial email information.

Connect your email accounts to scan directly from your inbox without downloading files.

Gmail

1. Go to your Dashboard and find the "Connected Mailboxes" section.
2. Click Connect next to Gmail.
3. Sign in with your Google account and grant read-only access.
4. You'll be redirected back to Phishivox with a success message.

Microsoft 365

1. Go to your Dashboard and find the "Connected Mailboxes" section.
2. Click Connect next to Microsoft 365.
3. Sign in with your Microsoft account and grant read-only mail access.
4. You'll be redirected back with a success message.

Every scan produces a detailed report with a verdict, confidence score, and breakdown of what was detected.

Verdicts

5-Layer Detection Pipeline

Phishivox analyzes every email through five independent detection layers:

1. Rule Engine — Pattern matching for sender spoofing, lookalike domains, urgency language, and known phishing tactics.
2. URL Analyzer — Inspects every link for blocklisted domains, suspicious TLDs, IP-based URLs, and redirect tricks.
3. Header Forensics — Checks SPF, DKIM, and DMARC authentication results plus routing anomalies.
4. Attachment Analysis — Scans for dangerous file types, double extensions, macro-enabled documents, and checks file hashes against VirusTotal.
5. AI Analysis — Advanced AI performs deep language analysis, detects brand impersonation, and provides human-readable explanations. Available on Professional and Enterprise plans (limited on Free).

Confidence Score

The confidence score (0–100%) indicates how certain the system is about the verdict. Higher confidence means more detection layers agreed on the assessment. A low-confidence phishing verdict means some layers flagged the email while others didn't — worth investigating.

AI Findings & Recommendations

When AI analysis is available, you'll see structured bullet-point findings explaining exactly what the AI detected, along with actionable recommendations for what to do next.

Upgraded from Free to Professional? You can rescan any previously analyzed email to get the full AI-powered analysis without re-uploading it.

How to rescan

1. Go to your Dashboard and find the email in your recent scans.
2. Click on the scan to open the detailed report.
3. Click the Rescan button (amber colored).
4. The email is re-analyzed with your current plan's capabilities — including AI analysis if you're on Professional.

Plan availability, scan volume, AI-assisted analysis, mailbox capacity, retention, and price are shown on the live Pricing page. Those values are the source of truth because they can vary by product offering and billing region.

Before purchasing

• Confirm the organization that should own the subscription and the administrator who will manage billing.
• Review the plan, mailbox quantity, interval, and total shown at checkout.
• For organization trials, decide whether to start billing immediately or after the trial ends.
• Do not share payment details in support tickets, chat, or email.

Payment and activation

Organization subscriptions use a Razorpay checkout window. A pending subscription is not active until the payment authorization completes. After checkout, return to Billing & Subscription and verify the payment method, current period, and next billing date.

Start a subscription

1. Open Billing & Subscription or choose an upgrade option from the application.
2. Select the plan, mailbox quantity, and billing interval that match your organization.
3. Review the billing currency confirmed by Phishivox. If it cannot be verified, contact support before checkout.
4. If your organization has an eligible trial, choose Start after trial to preserve the remaining trial time, or Start now to authorize payment immediately.
5. Complete Razorpay Checkout and wait for the confirmation before closing the billing page.

Manage an active subscription

• Use Billing & Subscription to review the active plan, quantity, next billing date, and available payment-method details.
• Change mailbox quantity only after confirming the resulting price and effective timing.
• Cancel from the same page. Cancellation at period end preserves service through the current paid period.
• If a checkout remains pending or information does not synchronize after authorization, contact support with the subscription reference shown in the product.

Use an organization to manage team access, billing, provider connections, and shared security operations. Keep organization administration separate from ordinary user access.

Recommended onboarding order

1. Create the organization and confirm its name and billing owner.
2. Invite at least one additional trusted administrator before connecting a mail provider.
3. Invite members using the appropriate role. Members can use product features; organization administrators manage users, billing, and connections.
4. Complete the provider-specific setup from Set up email security.
5. Verify the connection, review the reported status, then run a safe test before considering monitoring operational.
6. Document who reviews detections, who can enable remediation, and how escalations are handled.

Microsoft 365 organization connection

An appropriate Microsoft 365 administrator starts the consent flow from onboarding. Complete the Microsoft consent screen, return to Phishivox, and verify the connection. If the product reports a degraded or failed state, correct that issue before relying on monitoring.

Google Workspace organization connection

A Workspace Super Admin enters the Workspace domain and a verification mailbox. Phishivox displays its vendor-managed OAuth client ID and the read-only scope required for monitoring. Add exactly the displayed values to Google Admin Console domain-wide delegation, then use Verify connection.

Theme toggle

Click the sun/moon icon in the header to switch between dark and light mode. Your preference is saved locally.

Disconnecting mailboxes

Go to your Dashboard, find the mailbox under "Connected Mailboxes," and click Disconnect. This immediately revokes access — Phishivox can no longer read your emails.

Cancelling your subscription

Open Billing & Subscription as the billing administrator and chooseCancel subscription. When cancellation at period end is available, service remains available through the current paid period and does not renew afterward.

Need help?

Contact us at support@phishivox.com for any account-related issues.

Gmail keeps asking me to reconnect

This usually means the OAuth token expired and couldn't be refreshed. Go to Dashboard, disconnect Gmail, then reconnect. Make sure you grant all requested permissions during the OAuth consent screen.

Microsoft 365 shows "Network error"

Ensure you're connecting with the correct Microsoft account. If you use a Gmail address for your Microsoft account, the mailbox will be empty because your emails live in Gmail, not Microsoft's servers. Use the Gmail connector instead.

M365 mailbox shows "0 emails"

If your email provider is Gmail but you signed in with your Microsoft account (using the same email), the Microsoft mailbox will be empty. Disconnect M365 and connect via the Gmail connector.

Scan quota exceeded

You've used the scan volume available to your current plan. Review the live plan options on the Pricing page or contact support if you need help selecting the appropriate plan.

"Please verify your email" error

You need to verify your email before using the app. Check your inbox for the verification link. If you can't find it, check your spam folder.

AI analysis not appearing

AI-assisted analysis availability depends on your active plan and current allowance. Review your account usage and the live Pricing page; if the result is unexpected, contact support with the scan reference.

Payment failed

If the Razorpay checkout fails or is dismissed, no charge is made. Try again — ensure your payment method is valid and has sufficient funds. Contact support@phishivox.com if the issue persists.

Scan results seem inaccurate

The 5-layer detection pipeline is highly accurate, but no system is 100% perfect. If a scan result seems wrong, try rescanning the email. If you're on the Free tier, upgrading to Professional enables AI analysis, which significantly improves accuracy for sophisticated phishing attempts.