Do you need a separate report for each suspicious email?

Each Email Forensic Report analyses one message — its headers tell the story of that particular message's origin and routing.

• If you have received several messages from what looks like the same source, ordering a report on one representative message is often enough to establish the origin, and you can keep the rest as supporting material.
• If the messages arrived by different routes or at different times — for example a mix of spoofed and direct mail — a report on more than one gives a fuller evidence picture, because each may trace back differently.

If you are collecting evidence for a formal complaint or legal action, it is worth analysing the messages that best demonstrate the pattern. Send us the ones you are most concerned about and, if you are unsure how many to submit, ask and we will advise based on what you are trying to establish.