How ScamSignal works
Seven checks. Every message. Instant results.
We check who sent it
When you paste a message with an email address, we check if the domain is real. Scammers use fake addresses like paypal-secure.net instead of the real paypal.com. We also look for slight misspellings — like arnazon.com instead of amazon.com — that are designed to fool you at a glance.
We spot pressure language
Scammers want you to panic. We scan for phrases like "your account will be suspended" and "act now or lose access" — the words designed to make you act without thinking. Legitimate companies don't threaten you into clicking links within hours. If a message creates a false sense of urgency, we flag it.
We inspect every link
We check all links in the message. Scam links often use IP addresses instead of domain names (like http://192.168.1.1/login), have suspicious endings like .xyz or .click, or try to look like real websites with extra words stuffed in. If a link says "PayPal" but goes somewhere else entirely, we catch it.
We flag personal info requests
No legitimate company asks for your password, PIN, or bank details by email or text. Ever. If a message asks you to "verify your account" by entering your card number, sort code, or login credentials, we flag it immediately. Your bank already has this information — they don't need you to send it over email.
We catch brand impersonation
We check if someone is pretending to be a well-known company. If a message mentions PayPal but comes from a different domain, that's a red flag. We look for mismatched branding — an email that uses Netflix's name but comes from netflix-billing-support.com instead of netflix.com. The logo might look right, but the domain tells the truth.
We detect business email scams
Some scams target workplaces, pretending to be the CEO asking for an urgent wire transfer, or the finance director requesting a supplier payment change. These are called Business Email Compromise (BEC) attacks, and they cost UK businesses millions every year. We spot the patterns: unusual requests, urgency, secrecy, and slight domain variations.
We check phone numbers
If you enter a phone number from a suspicious call or text, we check for premium-rate numbers (those starting with 09 or short codes that charge per minute) and known scam patterns. We also flag numbers that don't match the country the sender claims to be from — like an "HMRC" call coming from an overseas number.
Your score
After running all 7 checks, ScamSignal gives you a clear verdict. No jargon, no ambiguity.
Safe
No scam indicators found. The message looks legitimate, but always stay cautious with unexpected requests.
Suspicious
Some warning signs detected. The message might be legitimate, but proceed with caution. Verify through official channels before acting.
Probable Scam
Multiple scam indicators found. This message has strong hallmarks of a scam. Do not click links, do not reply, do not share personal information.
Scam
Clear scam detected. This message matches known scam patterns. Delete it, block the sender, and report it if you can.
Ready to check something?
Paste any suspicious email, text, or message. You'll get a verdict in seconds.
Check a message now