Stop the scams.
Skip the AI pitches.
Inbox Hero checks every new Gmail message for phishing, fraud and malware, moves AI-written cold pitches from strangers into their own folder, and sorts newsletters and receipts out of the way. What's left is the mail that matters, from real people.
Works inside your Gmail Nothing is deleted Sends only when you approve
Or get a sign-in link by email
Check your email
We sent a secure sign-in link to your inbox.
Open it and tap “Sign in to Inbox Hero.” The link expires in 15 minutes.
Open Gmail to find it →Quarantined. Not deleted.
- Name says PayPal, sent from
paypa1-billing.co - Button shows paypal.com, goes to
185.62.14.9 - Attachment is a program:
Statement.pdf.exe
Example inbox. Names and messages are illustrations.
- Checks every new email
- Quarantined, never deleted
- Nothing sent without your OK
- Access encrypted at rest
Scammers write with AI now. Good grammar proves nothing.
So Inbox Hero ignores how an email reads and checks what a scammer can't fake: who really sent it, where its links go, and what its attachments are.
Sender verification
Reads each message's authentication results (SPF, DKIM, DMARC) and flags mail whose display name, reply-to address or domain doesn't match who it claims to be.
Link inspection
Spots look-alike domains, raw IP addresses, shortened links, buttons that show one site and go to another, and pages built to collect your password.
Attachment checks
Catches “invoices” that are really programs (invoice.pdf.exe), files that run when opened, macro-enabled Office files, attached fake sign-in pages and password-locked archives. Attachments are judged by name and type and are never opened or downloaded.
AI intent review
Anything suspicious gets a second look from an AI that judges intent, not writing quality: credential theft, fake invoices, gift-card, wire and crypto requests, CEO and vendor impersonation.
Quarantine, not deletion
Only high-confidence threats move, into InboxHero/Fraud where you can review them. One tap brings a message back, and Inbox Hero learns from it.
Action required: your account has been limited
- From
- PayPal Billing <service@paypa1-billing.co>1
- Reply-to
- resolve.desk@gmx-mail.net1
- Auth
- spf=softfail · dmarc=fail
Dear Customer, we noticed unusual activity and have temporarily limited your account. Please confirm your information within 24 hours to avoid permanent suspension.
Confirm at paypal.com2http://185.62.14.9/pp/verify
AI-written pitches from strangers get their own folder.
Anyone can now send you a hundred “personal” notes a day. Inbox Hero spots cold outreach that was written or mass-templated by AI and moves it to InboxHero/AI Outreach, so the people you actually know stand out.
Only first contact from strangers
It only looks at mail from people you've never emailed, from domains you don't correspond with, in threads you've never replied to.
Judged on what the message is
An AI reads the message and asks one question: is one person pitching you? Sales offers, “15 minutes next week?”, SEO and link-building, partnership and investment pitches, and fake follow-ups all qualify.
Strict before it moves anything
Only a confident verdict files a message. Brand newsletters and marketing are left to the regular sorting, and anything you rescue is never filed again.
Never filed as AI Outreach
- People you've emailed
- Replies in your threads
- Mailing lists
- Receipts and notifications
Quick question about your growth plans
- From
- Jordan Pike <jordan@growthloop-hq.io>
- History
- First message · you've never replied
Hi Mike, I hope this finds you well! I came across your company and was really impressed by the work your team is doing.
We help companies like yours unlock scalable growth with done-for-you outbound. Would you be open to 15 minutes next week?
P.S. Just bumping this to the top of your inbox in case it got buried.
Know who's really emailing you before you act.
Inbox Hero checks each new email. When one deserves a second look, it gives it a verdict, shows you the signals behind it, and lines up the next step, so one tap does the work.
Three meters, at a glance
Scam risk, AI-written and Relationship strength: how much you've actually emailed this person, how fast you reply, and when you last talked.
Why, in plain words
The specific signals behind the verdict, like a bank account that changed since the last invoice or a reply-to address that doesn't match. Plus one line on what the sender wants.
One tap, Inbox Hero does it
Draft a reply. Hold a payment request and draft a check-in. Move it to Fraud or AI Outreach. Mark it safe. Add the deadline to your calendar. Nothing is sent until you tap.
The verdicts
- Likely scam
- Check before paying
- AI-written pitch
- AI-assisted, known sender
- Trusted contact
Invoice #2291 – updated payment details
InboxInboxHero/Check before payingA vendor you know, but the bank details changed. Confirm by phone before paying.
- Your last 4 invoices from Brightline went to an account ending 4417. This one asks for 9032.
- Reply-to is dana.ortiz.billing@gmail.com, not her company address.
- Sent at 3:12 am, outside her usual hours.
Pay $18,400 to a new bank account by Friday.
Hi Mike,
Please find attached invoice #2291 for October production ($18,400). Note that we've moved banks, so please use the updated details below for this and future payments:
Account name: Brightline Studio LLC
Routing: 121000358
Account: ****9032
Could you process by Friday? Thanks so much!
Dana
Example. Names are illustrations.
One verdict per email, only when it's worth one.
Why: look-alike domain coastline-bank-secure.co, failed DMARC, and the “Verify now” button goes to a raw IP address.
Why: first contact from a stranger, template phrasing, flattery then a generic “15 minutes next week?” ask.
Not a warning. Written with AI help, but you've traded 64 emails and he replies within a day.
What she wants: your approval on the Q4 budget by Thursday.
Examples. Names are illustrations.
Where you see it
-
1 · In Gmail
Dana OrtizInboxHero/Check before payingInvoice #2291 – updated payment detailsNorthline GoodsYour order #4417 has shipped
A verdict label on the email
The verdict shows up as a Gmail label, like InboxHero/Check before paying, so you see it in your inbox list on every device.
-
2 · Daily brief
Your inbox brief9:00 amCheck before payingDana Ortiz · $18,400 to a new accountHold & draft a check-inMark safe
The full panel in your brief
Your daily brief email carries each insight with its meters, the why, and the one-tap buttons.
-
3 · Optional
IHCheck before paying
The panel inside the email
Turn this on and Inbox Hero adds the panel to the top of the flagged email itself, right inside Gmail. The original is kept in Trash for 30 days. Off by default.
Set it up in a minute. Keep using Gmail.
Inbox Hero works in the background on the inbox you already have. Your folders show up as ordinary Gmail labels on every device.
- Step 1
Sign in with Google
One click, no password to share. Google will ask you to allow three things: read and organize your Gmail, send email you approve, and view (not change) your calendar so replies and reminders know your schedule. iCloud, Yahoo, Fastmail, AOL and other IMAP mailboxes can be added with an app password.
- Step 2
Every new email is checked, then sorted
Threats go to Fraud first. Cold AI pitches go to AI Outreach. Bulk mail is sorted by what it actually is:
NewslettersShoppingNotificationsLater+ your own folders - Step 3
Correct it once and it learns
Drag a message back to the inbox and that sender stays there. Move one into Shopping or Newsletters and it files that sender there from then on.
Answers, drafts and a morning brief.
Best, Mike
Quick Reply
Inbox Hero drafts replies that match how you write: your greeting, your sign-off, your length. Glance, tweak and send. Nothing goes out until you tap send.
Ask your inbox
Ask in plain English: what you're waiting on, when a package arrives, what someone said last month. Inbox Hero reads your mail and answers.
Daily brief
Each morning at 9 your time, a short email with what was filed, what was caught and replies ready to confirm. Turn it off with one click.
Built to be trusted with your email.
Gmail stays the source of truth. If Inbox Hero ever went down, your email keeps working exactly as it does today.
- Encrypted at rest. OAuth tokens and app passwords are stored with AES-256-GCM. We never see your Google password.
- Minimal permissions. Read and organize, plus send only when you tap send.
- Attachments never opened. Fraud checks read headers, links and attachment names and types only.
- Email can't steer the AI. Message content is treated as untrusted data, so a crafted email can't hijack it.
- Disconnect anytime. Disconnecting deletes your stored access immediately.
- Per-account isolation. Your mail is never mixed with anyone else's.
Free for 30 days. Then 27¢ a day.
Every feature, every mailbox you connect. Your first scan runs before you're asked for a card, you pay $0 today, and we email you 7 days before the trial ends. Cancel before then and you pay nothing.
Free while we're in beta.
Every feature, every mailbox you connect. No credit card, no trial clock. Billing isn't switched on yet.
- Scam, phishing and malware protection
- AI Outreach filter and auto-sorting
- Quick Reply, Ask your inbox, daily brief
Or $27 a quarter or $10 a month. Extra mailboxes $5/month each. Pricing details
After beta: $10/month per mailbox, or $99/year. Pricing details
The straight answers.
Does Inbox Hero delete my email?
No. It only moves mail between Gmail labels. Threats go to InboxHero/Fraud, pitches to InboxHero/AI Outreach, bulk mail to folders like Newsletters and Shopping. Everything stays in your account, and every move is one tap to undo.
Will it send email on my behalf?
Only when you approve it. Inbox Hero drafts replies, but a reply goes out only after you tap send in the app or confirm it from your daily brief.
Will it catch every scam?
No filter catches everything. Inbox Hero is strict about what it quarantines, because moving a real email is worse than leaving a suspicious one where you can see it. Treat any request for money, passwords or codes with care.
Which email providers work?
Fraud protection runs on Gmail, Google Workspace and IMAP mailboxes (iCloud, Yahoo, Fastmail, AOL and others): scams are moved into a Fraud folder on all of them. The AI Outreach filter and in-email Insights run on Gmail and Google Workspace. IMAP mailboxes are connected with an app password and also get sorting, Ask your inbox and Quick Reply. Outlook.com and Hotmail accounts aren't supported, because Microsoft has turned off app-password access for personal accounts.
How does it tell an AI pitch from a real person?
It only considers first-contact mail from strangers: people you've never emailed, in threads you've never replied to, with mailing lists and bulk mail excluded. An AI then judges whether it's one person cold-pitching you, and only a confident verdict moves it. Rescue a message once and that sender is never filed again.
What are Inbox Hero Insights?
When a new email deserves a second look, Inbox Hero gives it a verdict (Likely scam, Check before paying, AI-written pitch, or AI-assisted known sender), three meters for scam risk, AI writing and how well you know the sender, the reasons why, and one-tap actions. You see it as a Gmail label and in your daily brief. If you turn on the optional setting, Inbox Hero also adds the panel to the top of the flagged email in Gmail and keeps the original in Trash for 30 days. Insights run on Gmail, and they're guidance: nothing is sent unless you tap.
What does it cost?
It's free for 30 days, $0 today. Inbox Hero asks for a card after your first scan shows results, and emails you 7 days before the trial ends; cancel before then and you pay nothing. After the trial it's $99 a year (27¢ a day), $27 a quarter or $10 a month for your first mailbox, plus $5 a month for each extra one.
Nothing during the beta, and there's no card to enter. The planned price after beta is $10/month per mailbox, or $99/year.
Give your inbox a bodyguard.
Free for 30 days, $0 today. Sign in with Google and the first check runs right away. Google will ask for Gmail access and read-only calendar access; you can disconnect any time.