A message feels off, but you're not sure. Before you click, reply, or pay — run through these seven red flags. It takes about 30 seconds, and even one hit is reason to stop and verify.
"Act now", "expires today", "account locked". Scammers rush you so you don't think. Legitimate senders rarely demand instant action.
A message from a bank, carrier, or agency you have no relationship with — or from a random mobile number claiming to be one. Ask: was I expecting to hear from them?
Long-press the link and look at the real domain. Scam links hide behind lookalikes: extra words, hyphens, or odd endings like .top or .xyz instead of the company's actual domain.
Passwords, card numbers, verification codes, or a "small fee" to unlock something. Real companies don't collect these over text, email links, or DMs.
Prize wins you never entered, surprise refunds, guaranteed crypto returns. If the reward feels disproportionate to nothing you did, it's bait.
Legal threats, "your account is compromised" panic, or sob stories from a "relative" in trouble. Fear and sympathy both switch off critical thinking — that's the point.
Wrong tone for the brand, odd grammar in an "official" notice, or details that don't match your life (a delivery for something you never ordered). Trust the mismatch.
Paste any suspicious message into ScamLens and get an instant 0–100 scam risk score. Free to start, no download needed — it runs right in your browser.
Check a message now