Interactive Tool
🛡️

Scam Detector

Got a suspicious email, voicemail, text, or letter? Paste it here. We check it against 80+ known scam patterns — payment red flags, threats, authority impersonation, urgency tactics, debt-industry-specific tells, FDCPA collection violations, the 2026 attorney-model loophole, and AI voice-clone verification calls. Get an instant 0-100 score and clear next steps.

🔒 Privacy-safe: your messages, screenshots, and inputs never leave your browser. Pure client-side analysis. (The screenshot OCR engine loads once on demand from a public code CDN — no image or message data is sent.)

Paste the suspect message

Email body, voicemail transcript (type out what they said), text message, letter content, social media DM — anything. The more text you give us, the better the analysis.

Try a sample:
Up to 20,000 characters. For voicemails, type out what you heard.

Optional: sender info

If you have it, this catches additional red flags (suspicious domains, free email addresses claiming to be official, etc.). Skip if you don't.

Optional. Helps catch lookalike domains and free-email impersonation.
Optional. We compare against the actual sender if provided.

Got a Screenshot?

🔒 On-Device Only

Can't type out the message? Upload a screenshot and we'll read the text on your device — nothing is uploaded to any server. The extracted text flows directly into the analyzer above. This is optional; the paste-box is still the primary path.

📸
Click to choose a screenshot or drag and drop it here
PNG, JPG, WEBP, GIF accepted. The image stays on your device — OCR runs in your browser via Tesseract.js.
Screenshot preview
Tesseract.js is an open-source OCR library that runs entirely in your browser. No image data or extracted text is transmitted to any server. About Tesseract.js

Check a Link

Paste a URL and we'll run heuristic red-flag checks entirely in your browser — no network calls, no external lookups. We check for lookalike/punycode domains, suspicious TLDs, IP-as-host, excessive subdomains, URL shorteners, brand-in-subdomain tricks, and HTTP vs HTTPS. Optional: a stub for a live reputation check is below, OFF by default.

This toggle is a placeholder for a future Google Safe Browsing / urlscan.io integration. When enabled, the URL would leave your browser. It is currently disabled and will remain so until Mark enables it. Your privacy promise remains intact with this toggle off.

Check a Phone Number

Enter a phone number you received a suspicious call or text from. We give you heuristic guidance about neighbor-spoofing patterns and how to verify the real caller — no live database lookup. A stub for an opt-in reputation API is below, OFF by default.

This is a placeholder for a future RoboKiller / FTC DNC integration. Currently disabled. Your privacy promise remains intact with this toggle off.
Out of 100
Scam likelihood score
This tool is educational, not legal advice. The score is based on pattern matching against common scam tactics. Some legitimate messages will trigger flags (especially marketing messages with urgency), and a low score doesn't guarantee a message is legitimate — sophisticated scammers can avoid obvious patterns. Always verify any unsolicited message through an independent channel (look up the official phone number yourself; don't use the one in the message). When in doubt, don't pay, don't click, don't respond.

Important: This score is generated by automated pattern-matching, not human review. It can be wrong in both directions: legitimate messages may score high, and sophisticated scams may score low. A low score is NOT a green light — never send money, share credentials, or click links based on this tool. Verify any unsolicited message through a phone number or website you look up independently.
Is This Collector Real? — 5-Step Checklist

Got a call about a debt? Run these checks before paying a cent.

Fake debt collectors are a growing fraud. The FTC and CFPB report that phantom-debt calls — collecting on debts you don't owe, or that don't exist — are among the most-complained-about scams. This 5-step checklist is based on FTC guidance (February 2026) and your rights under the Fair Debt Collection Practices Act (FDCPA). Print it and keep it by the phone.

0 of 5 steps verified
Report a fake collector to FTC →
Also illegal under FDCPA: Calls before 8 a.m. or after 9 p.m. your local time. Calls more than 7 times within 7 days (or within 7 days after speaking with you). Threats of arrest. Obscene language. Reporting false information to credit bureaus. Any of these is a violation you can report to the CFPB at consumerfinance.gov/complaint.