ScamCheck uses AI to analyze message patterns, but it's not 100% accurate. Always use your judgment and verify suspicious messages independently.

Don't click links or provide personal information. Delete the message, block the sender, and report it to the platform if possible.

A 'Likely Safe' verdict means the message shows legitimate characteristics based on our analysis, but no automated tool can guarantee safety. Always verify by contacting the company directly through official channels. Our analysis is a helpful reference, not a guarantee.

We never store the content of your message. We record only anonymous metadata (verdict, input type, timestamp) to improve our service. If you sign in, you can optionally save scan results to your history — and delete them at any time.

Common scam indicators include urgency tactics, requests for personal info, suspicious links, poor grammar, and spoofed sender addresses.

Yes! You can upload up to 5 images at once, or upload documents like PDFs, Word files (.docx), email files (.eml), and text files. PDFs are analyzed visually by AI, while emails and other documents have their content extracted and analyzed for scam patterns. All files are uploaded temporarily for analysis and automatically deleted afterward. Only anonymous metadata about the scan is retained.

Yes! Sign in to view your 'My Scans' page. You can search, filter by verdict type, and export your history as CSV or JSON.

We automatically detect and expand shortened URLs (bit.ly, tinyurl, etc.) to reveal their real destinations. Shortened URLs in urgent messages get flagged as caution factors.

Yes, admin users can access a dashboard showing real-time statistics and user activity patterns. Everyone can also view the public Live Scam Trends page for real-time insights, activity feeds, and risk signals.

Businesses commonly use third-party services like Microsoft Forms (office.com), Google Docs, Dropbox, Calendly, DocuSign, and more. ScamCheck recognizes 430+ trusted service domains and won't flag them as suspicious. However, lookalike domains (like 0ffice.com with a zero) are still caught.

ScamCheck analyzes every link in a message for lookalike domains (amaz0n.com), typosquatting, brand impersonation, and suspicious TLDs. It distinguishes between legitimate third-party services and actual phishing attempts.

We check each domain's global web traffic ranking (via SimilarWeb) to determine if it's a well-known, established website or an unknown one. Well-known domains (top 100K globally) are a positive signal, while domains with no traffic data warrant extra caution. This data is shown in detailed mode alongside each link.

Simple Mode gives you a clear, plain-language verdict — just tells you if a message is safe or suspicious with an easy-to-understand explanation. Detailed Mode shows the full technical analysis: confidence scores, risk signal breakdowns, domain intelligence, link-by-link analysis, and domain reputation data. Choose Simple if you just want a quick answer, or Detailed if you want to understand exactly why something is flagged.

The 'Try an example' button loads a realistic test message into the scanner so you can see how ScamCheck works before pasting your own. Examples are different for each mode — Simple Mode examples focus on one clear risk signal, while Detailed Mode examples contain multiple risk signals like lookalike domains, shortened URLs, and suspicious file references.

The Live Scam Trends page shows real-time scam activity based on actual user scans. It includes live overview stats (scans in the last 24 hours, percentage flagged as scam), a recent activity feed of anonymized scans, dynamic insights generated from current data, and top risk signals trending today. Visit it from the footer or navigation.

Email forwarding to [email protected] is coming soon. Once available, you'll be able to forward suspicious emails directly without needing to copy and paste the content.