Paste a suspicious link or message
Drop in the link, message, email headers, or phone number that made you pause.
Built for the moment you're staring at something suspicious and just need to know what to do next.
Drop in the link, message, email headers, or phone number that made you pause.
For links, ScamKit scans Google Safe Browsing, AlienVault OTX, and AbuseIPDB in parallel — alongside domain-age, DNS, certificate, and phishing-pattern checks, all on one page.
Get a risk score, a plain-English verdict, what triggered it, and exactly what to do next.
Three trusted security sources. One free scan. Broader picture, faster.
Broader coverage · Fewer missed signals · Faster decisions
Fast danger signals for known unsafe websites — phishing, malware, and deceptive pages Google has already seen.
Open threat intelligence from the security community. Shows when a domain or IP appears in active threat pulses.
IP reputation and abuse report scoring so you can see whether the server behind a link has a history of abuse.
Why use just one scanner? ScamKit combines these trusted sources into one simple experience — free, no sign-up, no juggling tabs.
Results reflect what these public data sources report at the time of your scan.
Each tool does one thing well — no setup, no account, just type or paste and go.
Check suspicious URLs for phishing patterns, lookalike domains, redirects, and other risky signals.
Review scam texts, emails, or DMs for urgency, fake authority, threats, and suspicious asks.
Check unknown U.S. phone numbers for robocall, spoofing, and callback-scam patterns.
Inspect raw headers for SPF, DKIM, DMARC, and sender mismatches that can reveal spoofing.
Short, plain-English breakdowns of today’s most common scams and how to spot them before they cost you.
Long-con emotional manipulation that ends in a money request you never saw coming.
Fake trading platforms, fake profits, and withdrawals that never clear.
Too-good-to-be-true remote gigs that turn into money mule recruitment.
Criminals hijack your phone number to intercept 2FA codes and drain accounts.
These are the exact scenarios people bring to ScamKit every day.
Fake delivery notices with tracking links are the most common text scam. Paste the message and we'll break it down.
Caller ID can be faked. Check the number before calling back — real banks never ask for passwords over the phone.
Spoofed senders, urgent deadlines, and login links that go to the wrong place. Paste the headers and find out.
Shortened URLs, lookalike domains, and redirects that hide the real destination. Drop the link in and see what is behind it.
Don't panic. Walk through the recovery steps to lock down your accounts, halt pending transfers, and report the scam — in order, so nothing gets missed.
Send it to ScamKit so we can review patterns and help warn others. Your report helps improve awareness and detection — it takes about a minute.
No fear-mongering, no upsells, no thirty-tab security dashboard. Paste what you got, see what we found, and get a clear next step — even if you're not technical.
Deeper playbooks for parents, seniors, and small businesses. One-time purchase, lifetime updates, supports the free tools.