···
Email forensics · UK Community Interest Company
SelfCheck reads the cryptographic seal the sending server left on a message — and answers, in one honest verdict, whether the copy in front of you is what was actually sent.
No mailbox access · Source file deleted after processing · Consent-based
Watch the crime happen
This is the entire fraud. It takes eleven seconds, and no human eye can catch it.
The original, in the mailbox.
The bank's server sealed it cryptographically the moment it was sent.
Forwarding strips the seal.
One click — and the message leaves its protection behind.
Delete one character.
The minus sign. A debt of £2,000 becomes £2,000 in credit.
The copy looks perfect.
Same sender, same subject, same wording. The eye sees nothing.
The mathematics sees everything.
SelfCheck re-checks the seal: the body no longer matches. Verdict — MISMATCH.
Now you try
Enter your case code, drop the original .eml or .msg file — every check ends in one of three verdicts, never a guess.
Under the surface
We state what the mathematics shows and exactly where its coverage ends. An honest "cannot tell" is still information — and that restraint is why the report survives cross-examination.
Which headers and body parts the seal protects — shown, not implied.
Every report is fixed in time by two independent authorities.
The source email is deleted after processing. At rest we keep hashes, the coverage map and the report — nothing readable.
The deliverable
Not a green tick on a screen — a sealed, independently checkable document you can hand to a tribunal, a regulator, or the other side.
Who relies on it
"My client forwarded the sponsor's letter — is it what the employer actually sent?"
Verify before it enters the application bundle.
Verify a client's email"An applicant forwarded their reference and bank letter."
Check both against the sending institution's seal before CAS is issued.
Check an applicant file"The customer's 'proof of payment' email is central to this dispute."
A defensible answer in minutes, not weeks.
Screen a disputed emailThe question is binary: genuine — or altered.
The honest answer includes "cannot tell", and we say so — we state what the mathematics shows, and exactly where its coverage ends.
A VERIFIED verdict establishes that content is unchanged since it left the sending domain. It deliberately does not claim who typed it, or that the domain is the organisation it resembles.
Get started
Every organisation's verification needs are different. Tell us about yours and we'll build a proposal around your actual volume and compliance requirements.
Get started