⏱️ Urgency
Scammers may demand immediate action. A deadline alone doesn't prove fraud; verify the request independently.
PAUSE. CHECK. VERIFY.
Is that message a scam?
Learn to spot the signs.
Check common warning signs, understand why they matter, practice with real-world scenarios, and choose a safer next step.
No account neededLocal text analysisFree learning challengesSource-labeled results
What did you receive?
Remove personal details, passwords, and codes first. Local analysis stays in your browser. External checks are optional and send selected links through Cloudflare to Google.
Try an example:
Educational assistance, not a guarantee. No warning signs does not mean safe.
Your message review
This is an educational pattern check, not a verdict. It cannot verify who sent a message or guarantee a link is safe.
Links detected
Link text is shown for inspection only, not as clickable links. Up to five full HTTP(S) URLs per check. Bare domains and links inside images are not detected.
External results are threat-list findings, not identity verification. No match is not a clean bill of health. An unavailable check provides no conclusion.
HELP AFTER AN INCIDENT
Already clicked or shared something?
Choose what happened for a starting response. Do not use contact details supplied by the suspicious sender.
I opened a link
Close it. Do not enter information, download files, or allow notifications. Opening a page alone does not tell us whether your device was compromised.
I entered a password or code
Open the real service independently. Change the affected password, review active sessions, and contact its official support about securing the account. Change reused passwords elsewhere.
I shared personal or financial information
Contact the affected organization using independently verified contact details. Ask about account protections, fraud alerts, and monitoring. If identity information was exposed, visit IdentityTheft.gov for a tailored recovery plan.
I sent money
Contact your bank or payment provider immediately through its official app or a number you already trust. Explain what happened and ask about stopping payments and protecting the account. Recovery is not guaranteed.
I installed software or allowed remote access
Disconnect the affected device from the internet and seek trusted technical assistance. Use a different trusted device to secure important accounts.
Official guidance: FTC: What to do if you were scammed.
PRACTICE MAKES PROGRESS
Scam Spotter Challenge
Three quick scenarios. Choose the safest next step and learn why. These examples are fictional; never follow their links.
YOUR DIGITAL SAFETY TOOLBOX
Learn the warning signs
🔗 Lookalike links
Read the actual website address carefully. Misspellings and misleading domains matter more than the ending alone.
🔐 Codes and passwords
Never read back a sign-in code or password because an unexpected caller or message asks you to.
🎭 Familiar voices
AI voice cloning and caller-ID spoofing mean a familiar voice or displayed number isn't proof of identity.
Want to go deeper? Listen to Tech Made Simple EP2: AI Voice Scams.
What this tool does—and doesn’t do
It checks a small, transparent set of wording patterns. Optional Google Web Risk checks look for known URL threats. It does not inspect attachments, confirm sender identity, analyze screenshots, visit suspicious sites, follow redirects, or guarantee safety.
The application does not intentionally store messages or lookup results. When enabled, external checks send full selected URLs to Cloudflare and Google. Cloudflare, Google, and Turnstile process technical data under their own policies. Your hosting configuration can affect logging.
Source: Google Web Risk lookup documentation. Its database is not an open-source dataset. This application’s source code is included in the project.