Check Spoofed Unicode Text

How to use Check Spoofed Unicode Text

1. 1. Paste the suspicious text. Drop in a username, domain name or message that looks slightly off. The checker scans every character against known confusable and lookalike mappings.
2. 2. Read the verdict. The output states whether the text is spoofed and lists any suspicious characters found, showing the code point, its script and which familiar letter it is mimicking.
3. 3. Investigate flagged characters. For each flagged character, compare its Unicode block against the surrounding text. A single Cyrillic letter mixed into otherwise Latin text is a strong spoofing signal.
4. 4. Decide how to respond. Use the result to reject a suspicious username, flag a phishing message for review, or confirm that a string is safe before trusting it in an authentication flow.

When to use Check Spoofed Unicode Text

Check Spoofed Unicode Text scans a string for homoglyph and confusable characters, the kind of lookalikes attackers use to impersonate real names, brands or domains. Reach for it whenever a piece of text needs to be trusted, such as before it appears in a login, a payment confirmation or a support ticket.

• Verifying a suspicious brand name. A support ticket references a company name that looks correct at a glance, but the letters render slightly differently. Checking it flags a Cyrillic character standing in for a Latin one.
• Screening new account usernames. Your signup flow blocks impersonation attempts by scanning display names for mixed scripts before allowing a username like a spoofed 'Аpple' to register.
• Auditing a phishing email sender. An email claims to be from a known contact, but the sender name uses subtly substituted characters. Running it through the checker confirms the spoof and its exact code points.
• Reviewing pasted links before clicking. A chat message contains a URL that looks legitimate. Pasting the visible text here reveals whether any character is a homoglyph designed to mimic the real domain.

Examples

Аpple

Spoofed: yes

Suspicious characters:
  U+0410 CYRILLIC — looks like "A"

About the Check Spoofed Unicode Text tool

Frequently asked questions