Free, single-purpose tools you can use without signing up. Run a message through the checker, look up a suspected platform, or browse our brand-impersonation guide library.
Last reviewed: 12 May 2026 · ScamSupport research
SignalTools is a small, deliberate collection of single-purpose web tools. Each one is built around a question someone might need an answer to right now — is this email a scam, is this investment platform legitimate, who is calling me from this number — and is designed to give a useful answer in under sixty seconds without an account, without tracking, without an upsell. The tools below are everything that is currently live on the site, with the ones in the library shipping over the coming months.
The design philosophy is explicit: one tool, one job, done properly. The dominant product pattern on the modern web is the platform — a single service that tries to do twenty things and ends up doing each of them at sixty per cent of how well a dedicated single-purpose tool would do that one thing. SignalTools rejects that pattern by construction. The tools below do not share an account, do not share a profile, do not try to up-sell each other. Each lives at its own URL, runs in your browser, and treats you as someone who has a job to do and wants to get it done quickly.
The flagship. Paste any suspicious email, text, URL, phone number, voice message, image, QR code or .eml file. The tool runs entirely in your browser — nothing you paste is uploaded. Returns a verdict in under 5 seconds with the specific red flags found and what to do next.
Covers seven check modes: email body, URL, phone number, voice message OCR, image text, QR code decode, EML file upload. Plus three detection modes for higher-risk message types: Job Offer, Business Invoice, Crypto Opportunity.
Use the Scam Message Scanner →
Checks whether an investment platform, broker, crypto exchange or recovery firm appears on the FCA Warning List, OCCRP Scam Empire investigation, California DFPI Crypto Scam Tracker, FXLeaders blacklist, or other authoritative sources. Cross-references 52 platforms (growing weekly via automated FCA Warning List ingestion) across five verdict tiers: Known fraud, Unauthorised in UK, Authorised, No warning found, Possible impersonation.
Each verdict is sourced. Each detail page links to the live regulator entry so you can verify independently. Take-down requests honoured within 5 working days for genuine corrections.
Interactive 8-step wizard that walks you through the UK Mandatory Reimbursement Scheme (PSR APP fraud scheme). Input the loss amount, payment type, date, originating bank and case state; the wizard generates a personalised claim letter, evidence checklist, expected timeline and rebuttal letter for “gross negligence” refusals. Runs entirely in your browser. The scheme has returned £173m to 188,000 UK victims at an 88% reimbursement rate in its first year.
30+ UK banks, building societies and neo-banks with verified fraud-line phone numbers, in-app chat paths, complaints addresses, and hours of operation. Searchable by name; filterable by bank type (high-street / neo-bank / building society / card issuer). The page to bookmark before you need it.
The single highest-impact identity-protection action a UK fraud victim can take. Step-by-step walkthrough of registering with CIFAS — the UK’s national fraud-prevention service. £25 for 2 years of credit-file protection. The walkthrough covers eligibility, documents needed, the 6-step sign-up, the fee, and what happens once your record is flagged across 600+ CIFAS-member organisations.
The Stage-2 tool for card-payment scams that fall outside the PSR Mandatory Reimbursement Scheme. Interactive 7-step wizard determines whether your case is a Section 75 claim under the Consumer Credit Act 1974 (credit card, £100–£30,000) or a card-scheme chargeback (Visa / Mastercard / Amex), then generates a tailored claim letter to your card issuer, evidence checklist and timeline. Runs entirely in your browser.
Open the Chargeback generator →
The Stage-1 tool for screening investment offers before you commit funds. 10-step wizard checks any UK investment pitch against the 8 strongest scam patterns — first-contact method, returns claim, FCA regulatory status, payment route, pressure tactics, withdrawal friction, credentialing, and free-text scheme-shape detection. Returns a Critical / High / Medium / Low risk verdict, the specific red flags found, the likely scheme type (pig-butchering, recovery scam, boiler room, binary options, cloned firm, advance-fee), and a context-aware action checklist that routes to PSR or Chargeback recovery if you have already paid. Runs entirely in your browser.
Open the Investment Pitch Analyser →
Just had a cold, nuisance or silent call? A short triage wizard tells you whether it was legal under the UK rules that changed on 5 February 2026 (PECR + the Data (Use and Access) Act 2025), routes you to the correct regulator (ICO for marketing calls, Ofcom for silent/abandoned calls, Action Fraud for scams), and generates a ready-to-send complaint plus a “stop calling me” letter and an evidence log — copy or download each. Covers TPS breaches, unlawful recorded calls, the pensions and claims-management cold-call bans, and the scam path. Runs entirely in your browser.
Paste a suspicious email’s headers and get a forensic verdict in seconds — SPF / DKIM / DMARC authentication plus URL reputation, a PHISHING / SUSPICIOUS / LEGITIMATE result, and a plain-English, dispute-ready explanation you can forward to a client, a bank, or a PayPal / eBay / Etsy / Amazon dispute. Built for marketplace sellers defending disputes and for IT helpdesks / MSPs triaging “is this email a scam?” tickets at volume. First 10 checks free, no signup; an API and higher monthly volume from £29/month.
Real example scam messages with red flags, verification rules, and what-to-do steps for the UK’s most-impersonated brands. Banks, government, delivery couriers, big-tech, messaging channels.
In-depth research on UK and international scam patterns: the complete UK scam guide, anatomy of a phishing campaign, Telegram P2P safety, India + Canada fraud-recovery walkthroughs, family security stack, UK fraud numbers.
A few things shape what gets built and what doesn’t. Tools we publish meet four criteria: they answer a real question that lots of people are typing into Google in the wrong words; they can be useful in under sixty seconds; they work without an account; and they can be built privacy-first — analysis happens on the user’s device wherever possible, and where it cannot, the server-side processing is bounded and explicitly documented. Tools that fail any of those criteria stay in the “library” column above as long as the bar isn’t met, or get cut.
The funding model matters too. Each tool has to be sustainable on the same combined floor of non-intrusive ads on the educational pages plus the single opt-in NordVPN affiliate link — the funding the whole site rests on. A tool that would require its own subscription, its own paid API, or its own ad inventory beyond the site-wide floor is a tool that violates the “free, permanently” promise the rest of the site is built on, so it doesn’t make the cut.
Every tool is free, runs without a signup, and (where technically possible) runs entirely in your browser so your data stays on your device. We are funded by display advertising and a single affiliate partnership (NordVPN, with disclosure on every relevant page). Our AI Statement sets out exactly what AI we use, what we do not use AI for, and how to flag any classification you believe is wrong.