🛡️
🔎 Free · no sign-up · works anywhere
Scam SMS & link checker
Got a message that says a parcel is held, a toll is unpaid, your account will be blocked, or someone sent money “by mistake”?
Paste it below — the SMS, WhatsApp text or link (or, in India, a UPI ID) — and see which scam signs it carries, and what to do.
☎
Already paid or shared a code? Call your bank straight away on the number printed on your card.
India: call 1930, the national cyber-fraud helpline, and report it on cybercrime.gov.in.
Elsewhere: report it to the police or your national fraud-reporting service (US: reportfraud.ftc.gov · UK: Action Fraud, 0300 123 2040).
Checking a suspicious message — questions answered
How can I tell if an SMS is a scam?
Most scam messages follow a few patterns: a threat that your account, card or service will be blocked today; a parcel, toll or tax "fee" to pay through a link; a request to share a one-time code, PIN or CVV; a prize, job or investment that needs a small fee first; a link from a personal mobile number. Real banks never ask for a one-time code and never ask you to "verify" your account through a link. In India, add: KYC-expiry threats and UPI requests dressed up as a refund; real banks there send SMS from registered sender IDs such as VM-HDFCBK.
Is the message I paste sent anywhere?
No. The check runs as JavaScript inside this browser tab — the text is not uploaded, not stored and not added to the page address. The site counts only that a check was run and which verdict it gave, so we know the tool is used. If the message holds a short link (bit.ly, tinyurl and the like) and you tap "Follow the short link", that one link — not your message — is sent to cryosim.com, which opens it to see where it leads and keeps nothing.
How does the checker decide?
It uses the same rules as the Scam Checker in the Aegix Android app: scam phrases (one-time codes, parcel and toll fees, prizes, tech-support alerts, gift-card payments, part-time tasks, guaranteed returns, and India-specific ones such as KYC and digital arrest), UPI IDs and rupee amounts, and the structure of every link — shorteners, look-alike bank and brand domains, bare IP addresses, risky domain endings, fake government sites and APK downloads. Each sign adds to a score: 7 or more, or one strong sign together with a link, is Dangerous; 3 or more is Suspicious.
Can the checker be wrong?
Yes. It matches patterns, so a new scam written in plain words can score clean and a genuine message can trip a rule. "Looks safe" is not a guarantee: still never share a one-time code, PIN or UPI PIN, and open your bank through its own app, not a link. This page can follow a short link (bit.ly, tinyurl and the like) to show where it really leads; the Aegix app goes further and follows any link's redirects and looks it up in the Aegix blocklist.
Where do I report a scam SMS or call?
It depends on your country.
India: report the message on
sancharsaathi.gov.in (Chakshu) and file a complaint at
cybercrime.gov.in; unwanted commercial SMS can also be forwarded to 1909.
US: reportfraud.ftc.gov.
UK: Action Fraud, 0300 123 2040 or
actionfraud.police.uk (Scotland: Police Scotland, 101). In the US, UK and Canada you can also forward a scam text to 7726. Elsewhere, report it to your local police or your national cyber-crime / fraud reporting service.
What if I already tapped the link or paid?
Call your bank straight away on the number printed on your card and ask them to block the card or payment — the first hour matters most. In India, also call 1930, the national cyber-fraud helpline, and report it on cybercrime.gov.in; elsewhere, report it to the police or your national fraud-reporting service. If you installed an app from the link, uninstall it and change your banking passwords from another phone.