ScamSpot // Threat Intel

Real-time detection

Defense-grade scam detection before you click.

Paste a suspicious text, email, DM, WhatsApp message, or URL. ScamSpot scores it against phishing, fraud, impersonation, and malware patterns — with clear next steps.

0 / 12,000
High risk Phishing
    0 checks on this device No signup required Remove passwords and codes first Not financial or legal advice

    Always verify urgent bank, payment, legal, or identity requests through the official website, app, or phone number.

    Threat library

    12 scam patterns covered

    Each pattern has a dedicated checker tuned for the signals attackers use today.

    01 / Phishing

    Phishing email

    Spoofed bank, payroll, or login emails trying to steal credentials.

    Check →     02 / WhatsApp

    WhatsApp scams

    Family impersonation, OTP theft, fake job offers via WhatsApp DMs.

    Check →     03 / Links

    Suspicious links

    Lookalike domains, shorteners, malicious redirects, fake login paths.

    Check →     04 / Romance

    Romance scams

    Long-con grooming, pig-butchering, gift-card requests, urgent travel funds.

    Check →     05 / Crypto

    Crypto scams

    Fake wallets, rug pulls, deposit-doubling, recovery agent fraud.

    Check →     06 / Investment

    Investment fraud

    Guaranteed returns, broker impersonation, fake trading platforms.

    Check →     07 / Bank

    Bank impersonation

    "Fraud team" calls and texts pressuring you to move money or share OTPs.

    Check →     08 / Delivery

    Package delivery

    Fake USPS, FedEx, DHL redelivery fees and tracking link traps.

    Check →     09 / Jobs

    Job offer scams

    Remote roles asking for upfront payment, equipment deposits, or banking data.

    Check →     10 / Tech

    Tech support fraud

    Pop-ups and calls claiming infections, demanding remote access or payment.

    Check →     11 / Invoice

    Invoice fraud

    BEC wire diversion, fake vendor invoices, changed account details.

    Check →     12 / QR codes

    QR code scams

    Quishing — QR overlays on parking meters, menus, and emails leading to credential theft.

    Check →

    Example output

    What a scam check looks like

    Input

    “Your bank account is locked. Click this link now and enter your password to verify your identity.”

    Likely result

    • Verdict: likely scam
    • Type: phishing
    • Confidence: high

    What to do next

    • Do not click the link.
    • Do not enter passwords or card details.
    • Contact the company from its official website or app.

    How it works

    A second opinion before you click

    01

    Paste

    Drop in the suspicious email, SMS, WhatsApp text, marketplace DM, social message, or URL.

    02

    Check

    ScamSpot inspects for phishing, impersonation, investment fraud, romance scams, malware, job scams, and fake invoices.

    03

    Act

    Get direct next steps: ignore, verify through official channels, report, rotate passwords, or call your bank.

    FAQ

    Scam message questions

    What is ScamSpot?

    ScamSpot is a scam detector for suspicious messages, emails, social DMs, WhatsApp texts, and URLs. It checks for common fraud patterns and gives practical safety steps.

    What types of scams can it detect?

    ScamSpot can flag phishing, impersonation, fake delivery notices, romance scams, investment fraud, job scams, malware links, fake invoices, tech support scams, and suspicious payment requests.

    Is my message stored?

    No account is required, and the page only uses localStorage for the analysis counter in your browser. Messages you submit are sent to the checking endpoint to produce a result, so remove sensitive personal details when possible.

    How accurate is the detection?

    The detector looks for common scam signals such as urgency, impersonation, suspicious links, payment pressure, credential requests, and emotional manipulation. It is a risk assessment, not a guarantee that a message is safe or fraudulent.

    What should I do if it's a scam?

    Do not click links, download files, send money, or share passwords or codes. Verify through the official website or app, report the message, block the sender, and contact your bank if payment details were exposed.

    Can I check URLs?

    Yes. Paste the URL by itself or include the surrounding message. ScamSpot can inspect visible URL patterns such as lookalike domains, shortened links, fake login paths, and urgent verification wording.

    Is it free?

    Yes, ScamSpot can be used for free without creating an account. Usage limits may apply to keep the service reliable.