Step 1.What is their email provider?
If they use Hotmail (which includes outlook and msn) or Gmail, than unfortunately you are out of luck. You cannot get their IP address when they use hotmail or gmail
because these services hide senders IP, they call it "privacy", but in reality it's a scam and spam breeding. If they use Yahoo, AOL or any other provider, proceed.
Step 2.Locate full email headers.
Please refer to this article
to find out what are the full email headers and how to display them.
Step 3.Get their IP address
Copy the entire full email header and paste it into this email headers tracker
. The service will tell you what is their IP address. Once again, don't do it if a suspect uses hotmail or gmail, it will NOT tell you the correct IP.
Step 4.Find out if this IP is associated with scams
Okay, so you've got their IP address, but still not sure what to do with it. Of course, if their IP shows Nigeria or Malaysia and they claim to be in the US or UK, it is obviously a scam. But what to do if, for example, they claim to be in the US and their IP shows the US? In this case, enter their IP in the box above and it will tell you if it's a fake IP used in scams.
*** enter only their IP address in the box above, don't enter the full email headers or any extra words or characters;
*** make sure there is no extra blank space at the beginning or at the end of IP address. If there is, the system will not recognize the IP and you will get inaccurate result. Erase all blank spaces;
*** if the system says "wrong IP, this is IP of Yahoo" that means you've located and entered the wrong IP address. Keep searching for a correct one or ask for assistance in our forums;
*** a special notice for Spokeo subscribers:
Spokeo DOES NOT trace or reveal IPs. They are not an IP service. They do display some IPs in results, but those are not IPs of a person, those are IPs of an email provider, don't use those. The only way to get IP is either from full email headers or by using a service like Readnotify
*** the gmail and hotmail rule often doesn't apply to Russian scammers. Unlike Africans, who always use webmail, Russians are a little bit more sophisticated and often use mass-mailing email software. If you see TheBat! or Voyager reference in email headers, you might get their IP even if they are on gmail or hotmail.
**we constantly add new IPs to the database, but it is impossible to include all proxies. Besides, new bad IPs come out every day, just like new viruses. If IP is not found in the database, it might be a very fresh one.