Scam Checker
Check whether a message, offer or contact is a scam.
Learn moreScam intelligence, in your language
Stay ahead of the scam.
Your digital safety, on autopilot. Check a link, an email, a phone number or a website before you act — and see what the answer proves, and what it does not.
Free to use. No account needed for a basic check.
Scam CheckerLink CheckerEmail CheckerPhone CheckerWebsite CheckerQR CheckerScam RadarScamsGuidesReportsProtectionWhat you revealBrand watchFamilyBusiness
Tools
Six tools, one purpose
Every BaitScan tool answers a different version of the same question: is this safe?
Link Checker
Scan a link for phishing and malware before you open it.
Learn moreEmail Checker
Find out if an email address or sender is trustworthy.
Learn morePhone Checker
Check a phone number for scam reports.
Learn moreWebsite Checker
Check whether an online shop or website is legitimate.
Learn moreQR Checker
Reveal where a QR code actually sends you.
Learn moreThe read-out
Every check ends the same way: a score you can argue with.
Not a black box and not a verdict. Each result shows the score, the exact signals behind it, and how many checks ran to produce it.
Sample link check
14 checks runhttp://paypal-account-verify.example/login
Risk score
High-risk signals
out of 100
Signals found
- The connection is not encrypted (no HTTPS).
- The address contains words typically used on credential-harvesting pages.login
- A well-known brand name appears in the address, but the address is not owned by that brand.paypal → paypal-account-verify.example
Checks performed
How it works
How BaitScan works
Four steps, no jargon.
- 1
You paste what you received
A link, an email address, a phone number, a website, a QR code or the message itself.
- 2
We collect the signals
Domain data, redirect chains, authentication records, reputation lists and behavioural patterns.
- 3
You get a risk score
Not a black box. Every score comes with the specific indicators that produced it.
- 4
You get the next step
Block it, report it, secure your account, or proceed — with the reasoning to back the call.
About
Built for people, not just enterprises
Security tools have always been designed for IT departments. BaitScan is designed for the person who just got the SMS.
Your language
The tool, the explanation and the guidance are all localized — not just the interface.
Plain explanations
We tell you why something is risky, in words you do not need training to understand.
Actionable outcomes
Every result ends with what you should actually do about it.
Scam Radar
Scam Radar
A living library of documented scams: how they work, what they look like, and how to respond.
Free exposure check
What the internet already knows about you
This page reads your browser the way a tracking script would — canvas and audio fingerprints, fonts, graphics card, screen and time zone — and shows you every value it finds. The check runs on your device. Nothing is sent, and nothing is stored.
Fingerprints survive cleaning
Blocking is not the same as hiding
A score is a comparison
Questions people ask before they trust a scanner
Short, honest answers about what a check can and cannot prove.
Is BaitScan free?
Yes. Every check on this site is free and needs no account. The scanning runs in your browser wherever that is possible, which is also why there is nothing to bill you for.
Do you store what I paste into the checker?
No. The check runs in your browser and the text you paste is not sent to us and not saved. Refresh the page and the input is gone.
Can a scan prove that something is safe?
No, and anything that claims otherwise is overselling. A clean result means no known indicator was found right now. A domain can pass every check on the day it is registered and turn malicious the week after.
What should I do if the result is high risk?
Stop interacting with it. Do not pay, do not log in, do not click further. If you already shared a card number or a password, contact your bank immediately and change that password anywhere you reused it.
Where does the risk data come from?
From public indicators: domain registration data, redirect behaviour, authentication records, lookalike patterns and published scam reports. The reasoning behind every score is listed under the result.