Jump to:

• View an email's full header in Full-featured Mail
• View an email's full header in Basic Mail
• Find the true address in a forged email
• See where an email was delayed

An email’s full headers include information about how it was routed and delivered as well as information about the true sender of the email. View the full headers to find out where an email was delayed or who really sent an email with a forged address.

View an email's full header in Full-featured Mail

1. Sign in to your business email account.
2. Open an email.
3. Click the More icon then select View Raw Message. The full header is at the beginning of the raw message.
   

Note: You will not be able to view email headers or view all available sort mail options if Conversations is enabled. Learn how to disable Conversations.

View an email's full header in Basic Mail

1. Sign in to your business email account.
2. Open an email.
3. On the top-right of the message, click the Raw message link.
   

Find the true address in a forged email

Are you getting emails from an email address you blocked? Not sure if an email is really from who it says it is? An email sender can forge false information to make it look like the email came from a different address than it really did, but you can find the true information in the full header.

1. View the full header as described above.
2. Compare the bottom From address to the address in either the Received or Mailfrom field. The real sending email address is in the top-most Received or Mailfrom field.
   

Now that you have the true email address you can block or filter it.

• Set up filters to automatically send these messages directly into folders, like Spam or Trash. Learn how.
• Block an address so you don't receive emails from it. Learn how.

See where an email was delayed

Delivery records in the full headers show when each computer received the message. The first delivery is at the bottom; the newest at the top. If you find a large time gap between delivery records, that shows which computer delayed before sending it to the next computer.

1. View the full header as described above.
2. Find one or more lines that say Received. These are delivery records.
3. Review these records to identify any delays.
   

Note: In this example: mta1682.yahoo.com received the message from mta2009.yahoo.com with a delay of about 1 hour and 15 minutes.

See Also:

• Recognize a compromised business email account
• What is email spoofing?
• Spam
• Business email Index