Instantly verify suspicious emails, texts, and websites.From one uncertain message to everyday protection for your family. Get clear answers, investigate the evidence, and take IsThisSpam to your phone, browser and inbox.
We extract text with OCR, then use the existing text scam checker. Images are not analyzed by a vision model.
Images up to 4 MB. PDFs up to 10 MB and 5 pages. Mixed-content PDF pages with selectable text may omit text embedded in images. The file itself is not saved; submitted text follows the existing scan flow.
Free checks available. No signup required to start.
The IsThisSpam iPhone app. Example check from the app's built-in demo.
Simple 3-step verification
How Does Spam Detection Work?
You don't have to be the one who spots it. IsThisSpam analyzes message metadata, page contents, sender patterns, and language style to supply instant threat verdicts.
1
Paste or Submit
Copy any suspicious email body, SMS text message, sender address, phone number, or URL and paste it into the checker.
2
AI-Powered Analysis
Our safety-tuned model scans for urgency markers, check domain age and WHOIS records, and queries malicious databases.
3
Get Instant Verdict
Receive a clear "Low Risk", "Needs Caution", or "High Risk" verdict along with key warning indicators and recommended responses.
iPhone message filtering requires setup and applies to eligible messages from unknown senders. Features vary by plan and permissions.
Protection where you are
Scams reach you by text, call, email, link and now AI chat. We provide multiple layers of defense to keep you safe across the web, on your phone and in your inbox.
Texts.
Share a suspicious SMS to the app for a verdict before you reply, tap a link or send money.
IsThisSpam is independent and not endorsed by Apple, Google, Microsoft, Mozilla or OpenAI.
More than a yes or no
When you need more certainty, follow the evidence.
A quick check is just the start. Bring the message, the screenshot and the questions you still have.
SuperScan investigations
See the warning signs. Understand the next step.
Investigate senders, phone numbers, domains and social profiles with public evidence. Ask follow-up questions, add context, and keep an evidence report you can refer back to.
This recruiter wants a payment before my interview. Can I trust them?
High Risk · warning signs found
Look-alike domainSender differs from the company website.
Upfront payment requestYou are being asked to pay to get a job.
Your next step: Contact the company through its official website before responding or paying.
Illustrative investigation. Results depend on the evidence available.
invoice.pdf
screenshot.png
Attachment analysis
The scam isn’t always in the text.
Add screenshots and documents to an investigation. Examine the invoice, offer or message alongside the sender and links, so you can see the bigger picture.
Use the apps, browser extensions and inbox tools where suspicious messages reach you. Connect your account and choose the protection that fits your devices.
Scammers rarely target the person who spots a fake link. One plan protects your parents, partner and kids on their own phones and browsers, so the answer is there even when you're not.
Unlimited email, SMS and website scam checks
AI investigations and attachment analysis
Use our apps and browser extensions with your account
Daily identity monitoring and advice
Duo covers 2 people. Family covers you plus up to 10
We will not guess a price or start an unverified checkout.
One person, every device
Includes:
Unlimited email, SMS and website scam checks
SuperScan investigations with detailed explanations
Inbox protection on supported accounts
Daily identity monitoring and advice
Our iPhone, Android and browser apps on your account
Duo
You and one other person.
Checking price...
We will not guess a price or start an unverified checkout.
Everything in Just me:
Unlimited email, SMS and website scam checks
SuperScan investigations with detailed explanations
Inbox protection on supported accounts
Daily identity monitoring and advice
Our iPhone, Android and browser apps on your account
Plus for two:
PDF evidence report exports
Invite one other person
Best value for families
Family
You plus up to 10 people: parents, partner, kids.
Checking price...
We will not guess a price or start an unverified checkout.
Everything in Just me:
Unlimited email, SMS and website scam checks
SuperScan investigations with detailed explanations
Inbox protection on supported accounts
Daily identity monitoring and advice
Our iPhone, Android and browser apps on your account
Plus for your family:
PDF evidence report exports
Invite up to 10 people
Not ready to subscribe? SuperScan Case Pass, $4.99 USD once for one investigation.
10 additional follow-up messages
3 additional attachments
Evidence PDF export
No recurring subscription
Current investigation only. Valid for 24 hours. Start with the free investigation. The pass is offered inside that case when you need more. It is not the standalone evidence-report purchase.
All web plans are charged in US dollars (USD). Features depend on your platform, permissions and completed setup, and automated checks cannot guarantee safety. Already paid through an app store or a lifetime offer? Use the account linked to your purchase and check your access before subscribing again.
A one-time deep evidence report may be offered after an eligible scan for A$9 AUD. This is separate from USD subscription plans.
Protect your customers and staff
Business plans include team workspaces, bulk screening and Developer API evaluation access. Business Plus adds production API volume.
IsThisSpam protects you from the most common online threats. Learn what to watch out for.
Phishing Scams
Deceptive emails or texts pretending to be from trusted institutions like banks or government agencies. They trick you into sharing passwords, credentials, or multi-factor authentication (MFA) codes. Look for urgent language like "account suspended," generic greetings, and mismatched domain names in the sender's address or links.
Online Shopping
Fake e-commerce storefronts offering highly discounted popular items, electronics, or designer brands that never arrive. These sites often use brand names with slight variations or extra words (e.g., "discount-brand.com") and have no verified physical contact information. Check for missing HTTPS certificates, domain age less than 3 months, and payment terms that demand crypto, gift cards, or bank transfers.
Investment Scams
High-yield investment schemes, cryptocurrency giveaways, and "get-rich-quick" opportunities promoted on social media or direct messages. They promise high guaranteed returns with little to no risk, which is a key mathematical red flag. Scammers often pressure you to act immediately, request payment via untraceable digital assets, and show fabricated earnings dashboards.
Romance Scams
Scammers create fake online profiles on dating apps or social media, building deep emotional trust over weeks or months. Once trust is established, they fabricate urgent emergencies (e.g., medical crises, frozen bank accounts, or travel costs) to request wire transfers or gift cards. Key detection signals include requests to move communication off the original platform, refusal to video call, and stories that constantly change.
Tech Support
Deceptive pop-ups, search ads, or emails claiming your computer is infected with viruses, warning that your personal data is at risk. They instruct you to call a toll-free number where a "technician" asks to download remote-access software (like AnyDesk or TeamViewer) to fix the issue. Legitimate tech support departments will never contact you proactively via pop-ups to ask for remote access.
Delivery Scams
Fake package tracking notifications sent via SMS or email, mimicking postal services like USPS, DHL, or FedEx. They claim a parcel is held due to an incorrect address or unpaid customs fees, requesting a small fee and personal details to schedule redelivery. Spot these by checking the URL—official postal services do not use random domains (e.g., "usps-redelivery-fees.top").
Find answers to common questions about IsThisSpam, AI detection capabilities, and user privacy.
Is this service free to use?
Free accounts include up to 10 basic checks per month and one free lifetime SuperScan investigation. Some public checks can be used without a paid subscription. Paid web subscription prices are shown and charged in USD; an eligible one-time deep evidence report is A$9 AUD.
What types of scams can you detect?
You can check suspicious messages, email senders, phone numbers, and website links. The checker looks for signals such as impersonation, urgency, payment pressure, suspicious domains, and known threat intelligence. Results can be incomplete, so verify high-stakes requests through a trusted channel.
How accurate is the AI detection?
Our security-tuned AI analyzes multiple signal layers, including linguistic urgency markers, domain registration age, sender authenticity, and known threat lists. While no automated scanner is 100% perfect, our model flags key warning signs to help you make informed decisions.
Is my pasted information private?
Absolutely. We check the threat, not you. Paste checks are processed anonymously, and we do not store or sell your personal details. We recommend removing highly sensitive personal details (like specific account numbers) before checking, though our system is designed to strip these out automatically.
How does the website scam checker work?
When you check a URL, we query domain registration details (WHOIS), analyze SSL/TLS certificate status, check domain age, cross-reference established threat databases, and evaluate page copy for brand impersonation tactics.
What should I do if a message is marked as 'High Risk'?
If our tool identifies a message as high risk, do not click any links, do not reply to the sender, and do not call any phone numbers listed. Delete the message immediately, or block the sender in your email client or messaging application.
How do I install the browser extension?
Install the extension from its supported browser store, then enable the email services and permissions you want to use. Email scanning is available on supported Gmail, Outlook web, and Yahoo pages; coverage depends on your browser, extension version, and settings.
Can I use the IsThisSpam API for my business?
Yes. Developer API evaluation access is included with Business Starter and Business plans (10,000 calls for integration testing). Business Plus is the production API plan, with 250,000 calls per month. See the business plans and API page for current limits.
Stop scams before they reach the people you love.
Join 100,000+ people who check before they reply, click or pay.