Scam Checker
Scam Checker with DeepSearch. Read the request before you act on it.
Check a text, email or DM
Paste the message or upload a screenshot. Toll notices, parcel fees, bank alerts and “new number” texts are compared with known scam formats.
See exactly what the sender wants
Requests for payment, codes, passwords, gift cards, crypto or secrecy are quoted from your own message.
Inspect links without opening them
Hidden destinations, lookalike domains, raw IP addresses and shortened links are flagged from the address alone.
Compare links with threat lists
Addresses are checked against Google Web Risk and abuse.ch URLhaus. A link that isn't listed is not proven safe.
Check the sender's domain
Mail records, DMARC, SPF and registration dates are read from public DNS and RDAP for up to five domains.
Know what was not checked
Every result lists the checks that ran and the ones that couldn't. “No warning signs found” never means safe.
Threat lists, registries and public DNS. See the records behind each warning sign.
Google Web Risk and URLhaus
Public lists of known phishing and malware addresses, checked without opening the link.
Impersonated organisations
A reviewed list of the domains about 50 commonly impersonated organisations actually use.
RDAP registration records
Registration dates and registrars for up to five domains, linked to the registry's own answer.
Public DNS mail records
Mail servers, DMARC and SPF for the sender's domain, plus a disposable-mailbox list.
Numbering-plan data
Whether a phone number in the message is valid, its country and its line type.
One checked AI reading
An AI reading of the wording. Every quote it returns is matched character for character against your text.
Start your DeepSearch trial. Research the business behind a message.
Learn how scams work. And what to do after one reaches you.
Questions about a suspicious message? Here’s what Scam Checker can tell you.
Paste the message into Scam Checker, including its links and sender details, or attach a screenshot and review the extracted text. Remove passwords and private codes first. Choose Check message to see the sender's request, quoted warning signs, supporting domain checks and a next step. This free check does not authenticate the sender.
No result authenticates a sender. The result tells you what was checked and what remains unknown. Link addresses are compared with threat lists, but new scam pages often are not listed yet. If a message asks for money, codes or credentials, confirm the request through a channel you already trust before acting.
DeepSearch does not save the message, screenshot or result to an account, database or result cache. Text and screenshots are sent to our AI providers to perform the check. Link addresses, without the part after a question mark, go to Google Web Risk and abuse.ch URLhaus to check threat lists. A screenshot stays in your browser while you compare the extracted text. Keep this tab open to retain your result, or use Clear to remove it.
Opening an attacker's link can expose the checker to the page behind it, and the page a server sees is not necessarily the page you would see. Instead we check the link's structure, whether it borrows an organisation's name, its domain's public registration record and threat lists, and say plainly that the destination itself was not visited.
Contact your bank directly now, using a number on your card or statement; not one from the message; and tell them exactly what was shared. Change the password of any account the message touched from the service's own app, and block the sender.
Yes. Scam Checker is free and needs no account. A short per-visitor rate limit keeps it available for everyone.
Paste the message or the link into Scam Checker. It reads the address itself: the registered domain, text hidden before an @, raw IP addresses and shortened links. It compares the address with Google Web Risk and URLhaus and reads the domain's registration date. The link is never opened, and a link that isn't listed is not proven safe.
Scam Checker reads numbers in the message against numbering-plan data for validity, country and line type. That can't tell you who uses the number. For public mentions and call reports about a number, run Who Called Me.
In the US, the FTC asks you to forward scam texts to 7726 (SPAM), forward phishing emails to reportphishing@apwg.org and report the scam at ReportFraud.ftc.gov. If you paid or shared account details, contact your bank first, using the number on your card.