// MESSAGE CHECK · RED-FLAG ANALYZER

Check a message before you act on it.

Paste a message that feels off and see which known scam patterns it trips. It is a quick read meant to install the pause: the few seconds between a message and a reaction where most fraud falls apart.

60-second checklist

JavaScript is off, so the live analyzer is unavailable. Run this checklist by hand on any suspicious message:

1. Does it pressure you to act immediately or set a countdown? Real deadlines survive a day's delay.
2. Does it ask for a one-time code, password, PIN, or CVV? No legitimate service ever will.
3. Does it ask you to move money to a 'safe account' or pay a fee to release a larger sum? Both are scams.
4. Does it want crypto, gift cards, or a wire transfer? These are chosen because they are hard to reverse.
5. Does the link hide its real destination (a shortener, or odd lookalike characters)? Do not click it.
6. Does it tell you to keep it secret? Secrecy protects the scammer. Verify through a channel you already trust.

How to use it

1. Paste the full message: the SMS, email, or chat text, links and all.
2. Press ANALYZE. The check runs in your browser and shows which red flags stood out.
3. Treat any flag as a reason to slow down and verify through a channel you already trust, not as a final verdict.

Your text stays here

The analyzer is 100% client-side. Nothing you paste is sent to a server, saved, or logged. You can disconnect from the internet and it still works.

A worked example

Here is a real-shaped scam message and the flags it trips, so you can see what the check looks for:

CONFIDENTIAL

Sberbank Security: an unauthorized login to your account was detected. To avoid suspension, confirm your identity via the link bit.ly/sber-verify and tell us the one-time code we just sent by SMS. Do this within 15 minutes. Do not tell anyone, including bank staff.

What stands out here:

Claims to be bank security (borrowed authority).
Threatens to suspend the account and sets a 15-minute deadline (manufactured panic).
Hides the link behind a shortener and pushes you to log in through it.
Asks for the one-time code from SMS, which no real bank ever does.
Tells you to keep it secret, even from bank staff, to remove anyone who might stop you.

> Check a message before you act on it.