An unfamiliar person emails with a partnership idea, software demo, service offer or request to "explore synergies". Is it ordinary cold outreach, unwanted spam or the opening move of a scam?

The answer is not determined by polish.

In our anonymised public-scan review, hundreds of messages contained sales, promotion, demo, marketing or unsubscribe language. Those messages appeared across safe, spam and scam classifications. Recruitment-related language showed the same mixture.

Commercial intent is not automatically malicious. It does, however, create a convenient costume for fraud.

Start with the sender's identity

A legitimate salesperson should make it reasonably easy to establish:

their full name
the company they represent
a business domain connected to that company
a real product or service
a plausible reason they selected you
a contact path that exists outside the email

Be cautious when the email uses a free mailbox while claiming to represent a large organisation, or when the company name, sender domain and linked website do not match.

A matching domain is helpful, but not enough. Review the three-layer test for domains, identity and message intent.

Check whether the outreach is specific or merely decorated

Scam and low-quality outreach often use generic personalisation:

"I came across your impressive company"
"Your profile caught our attention"
"We have a unique opportunity"
"Our investors are interested in your sector"
"We can guarantee rapid growth"

A legitimate email is more likely to refer to something concrete and verifiable, such as a product page, public integration, relevant market or clearly defined business problem.

Specificity does not prove legitimacy, but vague flattery combined with a high-value request is a warning sign.

Identify the first real ask

The opening email may look harmless. The risk often appears in the next step.

Watch for requests to:

open an unexpected attachment
sign in to view a proposal
pay an onboarding, compliance or release fee
buy gift cards or cryptocurrency
share customer data
provide banking details before due diligence
install a meeting or remote-access tool from an unfamiliar source
move immediately to a private messaging app
bypass procurement or security review

A normal sales process can tolerate verification. A scam process tries to outrun it.

Review the links independently

Do not judge a link by the text displayed in the email.

Check:

the actual destination domain
whether it matches the claimed company
whether it redirects
whether a document link eventually asks for credentials
whether the domain is newly created or visually similar to a known brand
whether the scheduling page belongs to the sender or an unrelated account

Use the scam website checker before entering information.

Stop Guessing. Know if it's a scam instantly.

Protect yourself with our deep AI analysis. Choose the safety plan that fits your security needs.

One-Time Investigation

Need help with one suspicious message?

One complete AI investigation
Evidence and reasoning
PDF report
Secure Stripe checkout

Investigate this message

Ultimate Personal

Complete AI scam protection for everyday life.

$4.99AUD / mo

Unlimited email, SMS and website scam checks
Unlimited website scanning
AI investigations with detailed explanations
Protect up to 5 personal devices

Start protecting me

A practical cold-outreach test

Score the message across five areas.

Identity

Can you verify the person and company through independent sources?

Relevance

Does the proposal make sense for your role or business, or was it sprayed across the internet?

Process

Does the next step resemble a normal sales process, with a call, clear agenda and no sensitive request?

Infrastructure

Do the sender domain, reply-to address and links align?

Pressure

Can you take time to verify, or is there an invented deadline, secret opportunity or threat of losing access?

The more areas that fail, the less the message resembles ordinary outreach.

Legitimate, spammy and fraudulent can look similar

Likely legitimate outreach

clear identity
verifiable company
relevant reason for contact
no upfront payment
no credential request
normal scheduling and procurement process
willingness to answer questions

Likely spam

real product but poor targeting
repetitive bulk wording
excessive follow-ups
weak consent
little relevance
aggressive promotional claims

Likely scam

false or unverifiable identity
inconsistent domains
money or access requested early
unusual payment method
secrecy or urgency
malicious attachment or login page
process designed to avoid independent checks

How businesses can make their own outreach safer

Good companies are sometimes mistaken for scammers because their emails mimic scam patterns.

Before sending a campaign:

identify the sender and company clearly
explain why the recipient was contacted
use a domain aligned with the brand
avoid manipulative urgency
minimise redirects and link shorteners
do not attach unexpected executable or macro-enabled files
provide a genuine opt-out
keep the first request low risk
make verification easy

A pre-send spam and phishing check can reduce complaints while protecting customers from compromised templates.

What to do when you are unsure

Do not reply with sensitive information. Visit the company independently, find the named employee, and contact them through a trusted channel.

For email-specific checking, paste the full message into the email spam checker. Include the sender, reply-to address and links, with personal and financial details removed.

Cold outreach should survive scrutiny. If verification causes the opportunity to evaporate, it was not a healthy opportunity.

Data note: This article is based on anonymised category patterns in public checks containing sales, marketing, recruitment and promotional language. Keyword grouping was used only to identify broad themes. No original campaign, sender, company, prospect or message has been reproduced.