Everyday

Use Grok Bot to spot scam and phishing emails

Have your Bot flag suspicious emails with the specific red flags it found, without clicking anything, so you decide what's real.

What you need

• A connected email account

Steps

1. Ask the Bot to review unread email and flag anything that looks like phishing.
2. Require specific reasons: sender domain vs. display name, lookalike domains, urgency or threats, requests for passwords, payment, or gift cards, and link text that doesn't match the link target.
3. Tell it never to open links or attachments in suspicious emails.
4. Check flagged emails yourself. To check a real account, go to the company's website directly, never through the email link.
5. Make it part of a daily inbox routine.

Prompt to copy

Check my unread email from the last 24 hours for scams or phishing. For each suspicious one, list the sender's real address, the red flags, and how confident you are. Don't click links, open attachments, reply, or delete anything.

Tips

• Elon Musk highlighted this use on Oct 14, 2026. One user said the Bot correctly showed that an email they assumed was spam was a real voucher, so the review goes both ways.
• Treat the Bot as a second opinion, not a guarantee.

FAQ

Sources

• https://x.com/elonmusk/status/2110512477582795125
• https://x.com/Frank_AI_Lab/status/2110616649963319339
• https://docs.x.ai/grok-bot/approvals-security-and-privacy