You can find the IP address behind an email by reading the message headers, which most email providers let you view with a few clicks

Every email carries hidden information about where it came from. That information lives in the email headers — a section your email program normally hides. The headers contain the IP address of the server that sent the message, along with a timestamp and the path the email took to reach you. You do not need special software or technical training to see them. Gmail, Outlook, Yahoo Mail, and most other providers let you view headers directly in the interface.

The IP address you find is not always the sender's personal computer. It is usually the mail server that relayed the message — which could belong to their email provider, their workplace, or a service they used to send the email. A person using Gmail sends from Gmail's servers. A person using their company email sends from their company's mail server. This matters because the IP address tells you where the email came from technically, not necessarily who sent it or where they physically were.

Key Takeaways

  • Email headers contain the IP address of the mail server that sent the message, visible through a "Show Original" or "View Message Source" option in most email providers.
  • The IP address you find belongs to the mail server, not necessarily the sender's personal device — Gmail users show Gmail's IP, corporate email users show their company's IP.
  • The most useful header line is the one marked "Received" that shows the originating server, usually listed first or last depending on your email provider.
  • Finding an IP address from an email does not identify a person by name or location — it only shows which server handled the message.

How to view headers in Gmail

Open the email you want to examine. Click the three vertical dots (the menu icon) in the top right corner of the message. Select "Show original" from the dropdown. A new tab or window opens showing the raw email code, including all headers.

Look for lines that start with "Received:" — these appear in order from the last server to handle the email to the first. The topmost "Received:" line shows the most recent server. The IP address appears in square brackets, like [192.0.2.1], or after the word "from". If you see multiple "Received:" lines, the first one (at the very top) shows the originating mail server.

How to view headers in Outlook and Outlook.com

In Outlook desktop, right-click the email and select "Message" or "Properties" (depending on your version). A window opens showing message details including headers. In Outlook.com (the web version), click the three dots next to the email, then select "View message details" or "View message source".

The header section displays the same "Received:" lines as Gmail. The IP address appears in the same format — in square brackets or after "from". Outlook sometimes labels the originating server more clearly, showing "From:" with the server name and IP together.

How to view headers in Yahoo Mail

Open the email. Click the three dots (More) in the top right. Select "View raw message" or "View message source". The raw headers appear in a new window or tab.

Yahoo displays headers in the same standard format. Look for the first "Received:" line at the top of the header section — this shows the mail server that sent the message. The IP address is in square brackets or follows the server name.

What the IP address actually tells you

An IP address is a numerical label assigned to every device and server connected to the internet. Finding one from an email tells you which mail server handled the message, not who sent it or where they were sitting. A person in New York using Gmail sends from a Gmail server, which could be located anywhere Google operates data centers. A person in London using their company email sends from their company's mail server, which could be in any country where the company has infrastructure.

The timestamp in the headers shows when the server processed the message, not when the person wrote it. They could have written the email hours earlier and scheduled it to send, or written it on a phone and sent it when they reconnected to the internet. The headers show the technical path the email took, not the human story behind it.

Why someone might look up an email's IP address

People look up email headers for a few practical reasons. If you suspect an email is fraudulent — a fake invoice, a phishing attempt, or someone impersonating a company — checking the headers can show whether it came from the real company's mail server or from somewhere else. A fake PayPal email might claim to be from PayPal but come from a completely different IP address. That mismatch is a red flag.

People also check headers when they are troubleshooting email delivery problems. If a message never arrived, the headers on a similar message can show you the path it took and where it might have gotten stuck. System administrators use headers to trace spam or malicious emails back to their source server, then report that server to the email provider.

In rare cases, law enforcement or a lawyer might request headers as part of investigating a threat or harassment. The IP address alone does not identify a person, but combined with other information and a warrant, it can help trace the message back to an internet service provider, which can then identify the account holder.

What you cannot do with an IP address from an email

An IP address is not a person's home address or location. You cannot use it to find out where someone lives or works. IP addresses are assigned to servers and networks, not to individuals. Even if you could pinpoint the exact location of a mail server, that tells you where the server is, not where the person who sent the email is sitting.

You also cannot use an IP address to identify someone by name. The IP belongs to a mail server operated by a company — Gmail, Outlook, a corporation, an internet service provider. To connect an IP address to a specific person, you would need access to that company's logs and a legal reason to request them, which only law enforcement or a court can do.

Frequently Asked Questions

If I find an IP address from a suspicious email, what should I do with it?

Report the email to your email provider as spam or phishing. Gmail, Outlook, and Yahoo all have abuse reporting tools built into their interfaces. You can also forward the email to the real company being impersonated — most have a security or abuse email address on their website. The IP address itself is less important than the email provider's ability to trace and block the source.

Can someone find my IP address from an email I sent them?

They can find the IP address of your mail server, not your personal computer's IP. If you use Gmail, they see Gmail's IP. If you use your company email, they see your company's IP. Your personal home internet IP address does not appear in the headers unless you sent the email from your own mail server, which almost nobody does.

Does viewing email headers mean the sender knows I looked at them?

No. Viewing headers is a read-only action. The sender receives no notification that you looked at the headers, just as they do not know if you read the email itself (unless you have read receipts turned on, which is a separate setting). Headers are stored on your email provider's servers and are visible only to you.

What if the email headers show multiple IP addresses?

Multiple "Received:" lines show the path the email took through different servers. The first line at the top shows the most recent server to handle it. The last line at the bottom shows the originating server — the one that sent the message initially. Each line represents one hop the email made on its way to you. This is normal and expected for all emails.

Can I use an IP address to report someone to the police?

An IP address alone is not enough for police to identify someone. You would need to report the actual content of the threat or crime — what the email said, when it arrived, and any other context. If police decide to investigate, they can request information from the mail server's operator or the internet service provider associated with the IP address. You cannot do this yourself; only law enforcement can.