A scam checker asks for a message, but the result says not enough information. That can feel frustrating, especially when you already feel uncertain.

In the anonymised IsThisSpam dataset, 284 checks were classified as needing more information and 201 were input errors. A recurring reason appeared 279 times: the snippet was too short to verify the sender's intent, with no sender, domain or link included.

That is not a dead end. It is a request for the missing evidence.

Why one word or one name is rarely enough

A scam verdict depends on relationships between signals.

Consider the single word "invoice". It could refer to:

a normal bill you expected
a fake payment demand
a sales template
a support conversation
a document title
an attempt to start a business email compromise scam

The word is not the risk. The sender, context, link and requested action determine the risk.

The same problem applies to:

a person's name
a business name
a short code
a phone number
a social handle
a partial URL
a subject line without the body

A checker that confidently labels a tiny fragment is often guessing.

What to include for an email

For a stronger email assessment, include:

the subject line
the full sender address
the reply-to address, if visible
the message body
complete links without opening them
the name of any attachment
the action being requested
whether the conversation was expected

Email headers can add technical evidence, but the visible sender and full message are already much better than an address alone.

Do not submit passwords, private keys, one-time codes, complete card numbers or identity-document images.

What to include for an SMS

Include:

the full message text
the sender number, short code or displayed sender name
the full link
your country
whether you had just made an order, login or appointment
whether the sender is asking for money, credentials or a call back

A number-only lookup can provide reputation clues. The full message reveals the social-engineering pattern.

What to include for a website

Provide the complete URL, including the domain and path, but do not log in or enter information first.

A homepage and a specific payment page may behave differently. Redirects, subdomains and path names can all matter.

Use the scam website checker before visiting an unfamiliar destination when possible.

Stop Guessing. Know if it's a scam instantly.

Protect yourself with our deep AI analysis. Choose the safety plan that fits your security needs.

One-Time Investigation

Need help with one suspicious message?

One complete AI investigation
Evidence and reasoning
PDF report
Secure Stripe checkout

Investigate this message

Ultimate Personal

Complete AI scam protection for everyday life.

$4.99AUD / mo

Unlimited email, SMS and website scam checks
Unlimited website scanning
AI investigations with detailed explanations
Protect up to 5 personal devices

Start protecting me

What to redact without destroying the evidence

Privacy matters, but removing every useful signal can make a check impossible.

Usually safe to remove

your full name
home address
account number
order number
date of birth
identity-document number
one-time verification code
card or bank details
private conversation history unrelated to the suspicious request

Usually useful to keep

sender domain
link domain
wording around urgency
claimed organisation
payment method requested
attachment type
the instruction the sender wants you to follow
broad country context

You can replace personal details with labels such as `[NAME]`, `[ACCOUNT]` or `[ORDER NUMBER]` while leaving the structure of the message intact.

Weak input versus useful input

Too little

"Bank message"

There is no sender, request, link or context.

Better

"Unexpected message claiming to be from my bank. It says my account is restricted and asks me to sign in through a shortened link."

This version exposes the impersonation claim, urgency and requested action without revealing personal data.

Stronger

Include the sender identifier and the full destination domain, with account details removed.

When a screenshot is better

A screenshot can preserve:

display-name tricks
layout and branding
the sender field
suspicious buttons
unusual formatting
conversation-thread context

Crop out unrelated conversations, contact photos, account balances and notification previews before uploading.

For high-risk cases involving attachments, multiple links or payment instructions, a deeper SuperScan may be more appropriate than a short text check.

Why uncertainty is a feature, not a failure

A responsible tool should not manufacture certainty.

"Not enough information" means the current evidence does not support a reliable classification. The safest next step is to add context or verify the claim independently.

That is better than being falsely told a dangerous message is safe, or wrongly accusing a legitimate sender.

A simple submission template

Use this structure:

Channel: email, SMS, call, social media or website
Claimed sender: organisation or person
What happened: expected or unexpected
Requested action: click, pay, call, install, reply or share information
Link or domain: complete but unopened
Sensitive details removed: yes

The goal is not to submit everything. It is to submit the parts that explain who is asking, what they want and how they want you to act.

Data note: This article is based on aggregate input-quality outcomes from the IsThisSpam public scan database. Example text was written as a fictional composite. No original message or personal identifier has been reused.