Scam SMS & link checker

Most Indian scam messages follow a few patterns: a threat that your KYC has expired or your account, SIM or electricity will be cut today; a link from a personal mobile number; a request to share an OTP, PIN or CVV; a UPI request dressed up as a refund; a prize, job or investment that needs a small fee first. Real banks send SMS from registered sender IDs such as VM-HDFCBK, never ask for an OTP, and never ask you to update KYC through a link.

No. The check runs as JavaScript inside this browser tab — the text is not uploaded, not stored and not added to the page address. The site counts only that a check was run and which verdict it gave, so we know the tool is used.

It uses the same rules as the Scam Checker in the Aegix Android app: scam phrases (KYC, OTP, digital arrest, parcel fees, part-time tasks, guaranteed returns and more), UPI IDs and rupee amounts, and the structure of every link — shorteners, look-alike bank and brand domains, bare IP addresses, risky domain endings, fake government sites and APK downloads. Each sign adds to a score: 7 or more, or one strong sign together with a link, is Dangerous; 3 or more is Suspicious.

Yes. It matches patterns, so a new scam written in plain words can score clean and a genuine message can trip a rule. "Looks safe" is not a guarantee: still never share an OTP or UPI PIN, and open your bank through its own app, not a link. The Aegix app adds checks this page does not have, such as following a link's redirects and looking it up in the Aegix blocklist.

Report the message on sancharsaathi.gov.in (Chakshu) and file a complaint at cybercrime.gov.in. Unwanted commercial SMS can also be forwarded to 1909.

Call 1930, the national cyber-fraud helpline, straight away — the first hour matters most — and report it on cybercrime.gov.in. Then call your bank on the number printed on your card and ask them to block the card or UPI. If you installed an app from the link, uninstall it and change your banking passwords from another phone.