How do I verify a forwarded email?

Ask the mailbox owner to export the original email as a .eml file, then upload it to selfcheck.email. The DKIM signature on the original indicates whether the content is unchanged.

What does DKIM verification establish?

A valid DKIM signature establishes that the email content has not been altered since the sender's mail server signed it. It does not establish that the content is true or that a specific person wrote it.

Yes. You can verify up to 5 emails per hour without an account. Free accounts get 5 cases per month with timestamped PDF reports.

Does SelfCheck store my email?

No. The email file is processed in memory and deleted immediately. Only cryptographic hashes and the PDF report are retained.

SELFCHECK.EMAIL

Verification Report

SC-2026-004217Wed, 15 Jan 2026 14:32:00 GMT

Basis of examination

Verification of file provided by the mailbox owner

Provenance

The file was submitted directly by the mailbox owner via a single-use invitation link. The requesting organisation did not handle or transmit the file.

Consent record

Owner consent recorded at Wed, 15 Jan 2026 14:32:00 GMT. Scope: message content included in report.

Verdict

The sender domain's seal is intact. The signed content has not been altered since the sending server processed it.

A valid seal confirms the message is unchanged since it left the sending domain. It does not confirm that the domain belongs to the organisation it resembles, or who wrote the message. Always check the domain itself.

See below: What this report does not establish

Signature coverage

Body integrityMessage body content is intact and unchanged since the sending domain sealed it.

Signed headersFrom, Subject, Date, To, MIME-Version are covered by the cryptographic seal.From, Subject, Date, To, MIME-Version

From alignmentThe sender domain matches the domain that issued the cryptographic seal.

Forwarding chainNo forwarding chain present. This is normal for messages delivered directly.

AttachmentsAttachments are included within the sealed scope. The full message body — including all attachments — is covered by the cryptographic seal.

Requested message criteria

From:owner@example.com

Subject:Invoice #INV-2026-0042

Date:2026-01-15

Cryptographic seals (1)

example.com

rsa-sha256 · 2048-bit key

Timestamp proof

Report SHA-256:

TSA:http://timestamp.digicert.com

Anchored:Wed, 15 Jan 2026 14:32:00 GMT

EngineMethodology v1.0

Verified atWed, 15 Jan 2026 14:32:00 GMT

What this report does not establish

—A valid seal confirms integrity — not that the domain belongs to the organisation it resembles. Always check the domain itself.
—That the content of the message is true or accurate
—That a specific person wrote or sent the message
—That the sending account was not compromised
—That unsigned parts of the message were not changed

Verify this report at

selfcheck.email/verify/SC-2026-004217

SelfCheck provides technical findings on message integrity. It does not provide legal advice. Admissibility and evidential weight are matters for the tribunal.

···

What this report does not establish

—A valid seal confirms integrity — not that the domain belongs to the organisation it resembles. Always check the domain itself.

—That the content of the message is true or accurate

—That a specific person wrote or sent the message

—That the sending account was not compromised

—That unsigned parts of the message were not changed