Support

Installing

1. Open the Stonephish page on the Chrome Web Store and press Add to Chrome.
2. Chrome will ask you to confirm. It will say Stonephish can read and change your data on the mail sites it supports — that is the extension doing its job, and it is the only access it asks for.
3. Open your webmail and click any email. Within a few seconds you’ll see a small badge next to the sender’s name.

Stonephish works in Chrome, Edge, Brave, Opera and Arc — anything built on Chromium.

What the warnings mean

You see	It means
Danger (red)	Something concrete is wrong: the sender’s domain doesn’t match who they claim to be, a link goes somewhere it shouldn’t, or the message is asking for money in a way you can’t reverse. Don’t click, don’t call, don’t pay.
Caution (amber)	Worth a second look. Often a shortened link, or a sender we can’t confirm either way. Not proof of a scam.
No badge at all	Nothing stood out. Stonephish stays quiet on purpose — a tool that warns you constantly gets ignored.

Common questions

It warned me about an email I know is real.

Please tell us. False alarms matter more to us than missed scams, because they are what make people stop trusting the warnings. Send the sender address and subject line to support@stonephish.com and we will tune it.

It didn’t warn me about something that turned out to be a scam.

Also worth telling us, and more useful than you’d think. Forward what you can. Stonephish is a second pair of eyes, not a guarantee — it catches the patterns scams rely on, but a careful, targeted message can still get through.

Does Stonephish read my email?

It reads the message you currently have open, in your browser, to check it. Nothing is sent anywhere — the extension makes no network requests at all. The full detail is in the privacy policy.

Why doesn’t it work on my email provider?

Version 1.0 supports Gmail, Outlook on the web, Yahoo, AOL, Proton, iCloud, Zoho and Fastmail. If yours isn’t there, email us and tell us which one — that is how we decide what to add.

It stopped appearing.

Reload the mail tab first. If that doesn’t do it, open chrome://extensions, check Stonephish is switched on, then toggle it off and on again. If it still won’t show, email us with your browser version.

How do I remove it?

Right-click the Stonephish icon in the toolbar and choose Remove from Chrome. Everything it stored on your device goes with it.

Reporting a security issue

If you have found a vulnerability in Stonephish itself, email support@stonephish.com with the subject line Security. Please give us a reasonable window to fix it before publishing.