Scam Checker for Messages and Links

An online tool for checking a suspicious message, link or screenshot. It shows where a link really goes without opening it, catches lookalike domains and recognizes scam scripts in ten languages.

How to check

1
Paste the message

The whole thing, link included, or a picture of it. The check runs as you type.

2
Look at the real address

If the domain isn't the one you expected, you can stop there.

3
Do the one thing that works

Hang up and call back yourself using the number on your card.

🔥 Trending right now
🗣️ Text to Speech ✨ Video Enhancer ✂️ Trim Audio ✨ Audio Enhancer 🎭 Voice Changer 🎙️ Vocal Remover 🎬 Create Video from Audio 🎬 Trim Video

Check before you send money or read out a code

Checks as you type
Try:
Already sent money or shared a code?
  1. Call your bank now using the number on your card or in the app. Ask them to freeze the card and dispute the transaction.
  2. Change passwords and sign out everywhere bank, email, government accounts. If you shared a code for one of them, start there.
  3. Remove apps you installed at their request AnyDesk, a "bank update" and the like. If you're not sure everything is gone, factory-reset the phone.
  4. File a police report the same day with numbers, screenshots and your bank statement. Without it, the bank can do little.
  5. Warn your family scammers may start asking them for money in your name.
Family code word

Against a "Mom, I'm in trouble" call, including one in a voice cloned from social media. A clone can't be told apart by ear, but only your family knows the word.

The rule is simple: any unexpected request for money comes with the code word first.

The breakdown will appear here

Paste a message or a link, or tap one of the examples.

  • sberbank.ru@evil.topWhere the link goesEverything before "@" isn't the address. The real domain is shown large.
  • sbеrbank.ruLookalike lettersA Cyrillic "е" in a Latin domain is invisible to the eye, not to the check.
  • «read me the code»Scam scriptsSafe account, one-time codes, "Mom, I'm in trouble", in 10 languages.

The check looks at the text and at how the link is built. It doesn't look the domain up in databases or open the link, so there is no "safe" verdict here.

Don't know what to try?
800+ tools — open a surprise
🎲 Surprise me

Features

The link's real address
A link goes to whatever sits after the last "@" and before the first slash, not to whatever it starts with. That address is shown in large type, the domain is split into parts, and an encoded xn-- name is turned back into its real letters.
Lookalike domains
A Cyrillic "а" inside paypal.com looks exactly like a Latin one. One sign is reliable: mixed alphabets inside one part of the domain. A brand name with an add-on like -secure or a one-letter typo is caught too.
Screenshots and QR codes
If the message only exists as a picture, add the screenshot or a photo of the flyer: the text is recognized on the page, and a link from a QR code joins the check.
Highlights right in the text
Each phrase that raised a flag is marked inside the message and explained on its own. Signs come in three tiers: no legitimate explanation, decisive, and minor.
Won't call your own bank a scammer
Real notifications such as "never share this code" are recognized and don't trigger a false alarm. People stop listening to a tool that panics at their own bank.
A family code word
Against a call in a relative's voice, including a cloned one. The word is picked at random, and a one-page family card with three rules is ready to print.

What you can do

  • See where a link goes without opening it
  • Catch a lookalike domain built from similar letters
  • Check a screenshot of a chat or a QR code
  • See suspicious phrases highlighted in the text
  • Send the result to a relative in one tap
  • Pick a family code word and print a reminder card
  • Find out what to do if the money is already gone

Why blocklists don't save you

A typical link checker answers one question: is this domain on a list of known bad sites. "No" sounds reassuring and means almost nothing. A phishing domain is registered in the morning, the texts go out in the afternoon, and the domain reaches the lists hours or days later. Money is sent in minutes, and during that window the lists are empty by definition. So this tool checks what is visible immediately and depends on no database. A domain mixing Cyrillic and Latin letters in one part is fake no matter how old it is. A link with a familiar name before the "@" goes somewhere else no matter its reputation. A request to read out a one-time code is a scam no matter who is calling.

Frequently asked questions

How do I check a link without opening it?

Paste it into the box; there's no need to open it. The tool examines the address itself: it shows the real domain, splits it into parts and marks the tricks used to fake it. If the link is shortened, a button appears that shows where it redirects.

What is a lookalike domain?

Some Cyrillic and Greek letters look identical to Latin ones: а, е, о, р, с. A domain like pаypal.com with a Cyrillic "а" is a different address that looks the same. The reliable sign is mixed alphabets inside one part of the domain. A domain written entirely in one non-Latin alphabet is legitimate, and the tool leaves it alone.

What is the "@" trick in a link?

Everything before the last "@" in an address is a user name, not a website. A link like paypal.com@evil.example goes to evil.example even though it reads, left to right, like PayPal. That is why the real domain is shown on its own line in large type.

What if the suspicious message only exists as a picture?

Yes. Tap "Screenshot or QR", paste the picture with Ctrl+V or drag it into the box. The text is recognized on the page; the first time, a recognition model is downloaded once. Read the recognized text yourself: in small print a letter can be misread.

Which languages are scam scripts recognized in?

English, Russian, Ukrainian, German, Spanish, French, Portuguese, Indonesian, Korean and Arabic. The text is checked against all of them at once, so a message in Spanish is recognized on the English page too.

The tool found no known signs. Does that mean it's safe?

No, and it deliberately never says so. No known signs means only that those signs aren't there. A well-written scam message is polite, correct and in no hurry. The rule "call back yourself using the official number" applies whatever the result.

What should I do if someone calls "from the bank"?

Hang up and call back yourself using the number on the back of your card. Not the number they gave you and not the one on caller ID: caller ID is easy to fake. A real bank never asks you to read out a one-time code, never moves money to a "safe account" and never asks you to keep the call secret.

Can scammers fake a relative's voice?

Yes. A few seconds of audio from social media is enough, and a clone can't be told apart by ear. What works is a family code word agreed in advance. The tool helps you pick one and print a reminder card; agree on it out loud ahead of time.

How can I find out how old a domain is?

Under the link breakdown there is a "Domain age" button that opens a separate registration lookup. A domain registered a few days ago in a message "from your bank" is a strong reason for caution.

I already sent money or shared a code. What now?

Call your bank right away using the number on your card and freeze the card, then report it to the police the same day. The chance of getting money back drops with every hour, but in the first hours it exists. A step-by-step list is under "Already sent money or shared a code?" below the input box.

💡 Want us to improve this tool just for you?

We can! Just send us a quick message with your idea. If you'd like to discuss it in detail, leave your email and we'll get back to you. You can stay anonymous.

You May Also Like

🔀 Redirect Checker 🛡️ VPN Checker 🛡️ Privacy Audit 🔌 IPv6 Test 📋 WHOIS Lookup 🔎 DNS Lookup 🖥️ System Diagnostics 🍪 Cookie Checker

How do you rate this tool?

Thank you for your rating!
Want to share more? Leave a comment!
Thank you! Your comment will appear after moderation.
Who is this tool for?
👨‍👩‍👧 Parents & Families 🔒 Security & Privacy
Published Updated Author: