Paste any suspicious text, email or WhatsApp message below. The analyzer checks it against the classic patterns used in phishing, delivery, bank-impersonation, romance and prize scams — entirely in your browser. Nothing you paste is sent, stored or logged, anywhere.

How the analyzer works

It scans for eight families of red flags that appear across scam types: manufactured urgency, untraceable payment methods (gift cards, crypto, wire transfers), credential requests (codes, passwords, “verify your account”), impersonation of banks, tax offices and delivery firms, too-good-to-be-true offers, pressure and secrecy demands, suspicious link patterns, and emotional bait. Real scams almost always combine several.

What it can’t catch

A clean result is not a guarantee — well-written scams and brand-new tactics can pass any pattern check. The two rules that beat every scam regardless: never act on contact details inside a message (look them up yourself), and no legitimate organisation asks for payment in gift cards or crypto, ever.

If it looks like a scam

Don’t reply — block and report. If you already clicked or paid, follow our first-30-minutes damage-control guide, which includes official reporting channels for 25+ countries. To protect family members, see the family anti-scam guide.

FAQ

Is it really private?

Yes — the analysis is a small script running on this page. There is no server call, no analytics event, no storage. You can even load the page, disconnect from the internet, and it still works.

Can I check a link without clicking it?

Long-press (mobile) or hover (desktop) to preview the real URL. Shorteners (bit.ly and friends) and odd domains (.top, .xyz) in unexpected messages are strong warning signs — the analyzer flags them.

The message is in another language.

The patterns are English; for other languages, apply the universal tests: urgency + unusual payment + a link or code request = scam, in any language.