Check a message
Paste an email, text, DM, or link. You'll get a quick answer on whether it's a scam and why.
Or try an example:
Ctrl + Enter
Recent checks
Nothing yet. Your last few checks show up here (only on this device).
Your result shows up here.
Paste a message on the left and hit Check it.
CASE #0000·
Scam
Threat level0/100
The message
Highlighted parts are what looked off. Green means a real, known site.
Red flags
Your next move
Want a second opinion?
Send this message to an AI for a plain-English read. Don't paste passwords or codes.
See the full breakdown
How they're working you
SLAM check
Links & senders on file
Every signal it caught
How the score adds up
Rule engine · signals checked · scored on your device
Spot the phish
Scam or legit? You get 12 messages. Make the call, then see what gave it away.
Score
0
Streak now
0
Best streak
0
Scam or legit?
Case closed
0/12
Detective
Top detectives on this device
Field guide
Before you click, reply, or pay, slow down and check these 4 things. Security teams call it SLAM.
S
Sender
- Look at the real address, not just the display name.
- Lookalikes swap letters: netflIx, paypa1, amaz0n.
- Your bank or school won't write from a random Gmail.
"CPP Financial Aid" <aid@cpp-financialaid.net> ← not cpp.edu
L
Links
- Hover (or long-press) to see where it really goes.
- bit.ly links, QR codes, and endings like .xyz .top .click hide the real site.
- Read the domain right before the first single slash.
paypal.com.secure-login.top → the site is secure-login.top
A
Attachments
- Weren't expecting a file? Don't open it.
- Watch out for .zip, .exe, and docs that say "enable content."
- Not sure? Ask the sender another way, like a call or text.
"Invoice_0921.zip" from someone you've never paid
M
Message
- "Act now" and "account suspended" are there to rush you.
- Nobody legit asks for passwords, codes, gift cards, or crypto.
- "Keep this between us" means they don't want you to ask anyone.
"Mom, new number, send $200 on Zelle real quick"
Already clicked? Do this now
- Change that password, plus any account that uses the same one.
- Turn on two-factor login (an app code, not just texts).
- Gave card or bank info? Call the number on the back of your card.
- Report it. At CPP, forward it to the IT Help Desk.
- Tell someone. Scammers count on you staying quiet.