Scam Message Checker: Is This SMS or WhatsApp a Fraud?
Paste a message you're unsure about. The checker spots the tricks behind KYC, electricity bill, parcel, e-challan, job and "digital arrest" scams, explains each warning sign, and checks any link before you open it.
- Message stays in your browser
- 12 common Indian scam types
- Link safety check
Warning signs
The message, with warning signs marked
Links in the message
How to test it
- Press electricity bill. It should say Likely a scam and mark the threat, the deadline and the mobile number.
- Press genuine OTP. It should recognise a normal OTP message, not a scam.
- Paste a message you received. If it has a link, press Check link safety before opening it.
Messages are checked in your browser. Link checks: 10 per hour.
How this scam message checker works
Knows the Indian scam scripts
It recognises the wording of 12 common scam types, from KYC updates and electricity cut-offs to fake parcels, e-challans, part-time jobs and "digital arrest" calls.
Explains every warning sign
Requests for OTPs or app installs, threats, deadlines, fees and personal phone numbers are marked in the message, so you can see exactly why it looks risky.
Checks links without opening them
Links that imitate a bank or government name, short links and risky domain endings are flagged. One press checks a link with Google Safe Browsing and VirusTotal.
Check it yourself. Open your browser's developer tools (F12) and choose the Network tab, then check a message. No requests are made: the message never leaves your device unless you choose to check a link.
Common scam messages in India
Each button loads a typical example into the checker.
| The message says | The truth | Action |
|---|---|---|
| "Your electricity will be cut tonight, call this officer" | Power boards don't disconnect over SMS or ask you to call a mobile number. The "officer" asks you to install a screen-sharing app. | |
| "CBI: drugs found in your parcel, you're under digital arrest" | "Digital arrest" doesn't exist. No agency arrests people over video calls or asks for money to close a case. | |
| "Your YONO or bank account will be blocked, update KYC" | Banks never send KYC links. The page copies your bank's login to steal your details and OTP. | |
| "Parcel held: incomplete address, pay ₹25 to redeliver" | The small fee is a trick to collect your card details. | |
| "Earn ₹3,000 a day liking YouTube videos" | You're paid small amounts first, then asked to "invest" in tasks and lose far more. | |
| "You won cashback, enter your UPI PIN to receive" | A UPI PIN is only ever needed to send money, never to receive it. |
How the risk score is worked out
Each warning sign adds points, and so does wording that matches a known scam type. Links add points for imitating a bank or government name, hiding their destination, using a risky ending or downloading an app. The total is capped at 100.
Likely a scam means 55 or more. Suspicious means 25 to 54. Below 25 means no common scam signs were found, which is not a guarantee of safety.
A message with a code, a "do not share" warning and no outside link or phone number is recognised as a normal OTP message, so genuine bank messages aren't flagged.
Sources: Sanchar Saathi (DoT), National Cyber Crime Reporting Portal, CERT-In, RBI Sachet.
What each warning sign is worth
| Warning sign | Points |
|---|---|
| Asks for an OTP, PIN, CVV or password | 40 |
| Install an app or APK, or AnyDesk | 35 |
| Link that imitates a bank or government name | 30 |
| Threat of block, fine, arrest or disconnection | 25 |
| Fee, charge or money request | 20 |
| Promise of prizes, cashback or high returns | 20 |
| UPI ID or request to approve a payment | 20 |
| Urgency: today, tonight, within 24 hours | 15 |
| Asks you to call or WhatsApp a mobile number | 15 |
| Matches a known scam type (up to two) | 20 each |
Mistakes scammers count on
Most losses start with one of these.
Sender names and numbers can be faked. Judge the message by what it asks you to do.
Screen-sharing apps let the caller see your OTPs and use your bank apps.
Entering your PIN always sends money. Receiving never needs it.
Scammers keep you on the line so you can't check. Hang up and call someone you trust.
Habits that stop message scams
When a message arrives
- Pause. Real deadlines are rarely a few hours.
- Open the bank, courier or power board app yourself instead of the link.
- Call back only on numbers from the official website.
- Never share OTPs, PINs or card details with anyone.
- Talk to a family member before paying anything unexpected.
For your family
- Tell elders that police never arrest anyone on a video call.
- Turn on spam call and SMS filters on their phones.
- Set a low daily UPI limit for accounts they use.
- Save 1930 in their contacts as "Cyber Fraud Helpline".
- Show them this page, and the examples above.
Frequently asked questions
Short answers about privacy, digital arrest and where to report.
Is the message I paste sent to your server?
No. The message is checked by code on this page, in your browser. Only if you press Check link safety is that one link sent to our server, which asks Google Safe Browsing and VirusTotal about it without opening it.
The checker says “no common scam signs”. Is the message safe?
Not necessarily. Scammers change their wording all the time, and a message can be dangerous without matching any known pattern. If it asks for money, codes or an app install, confirm with the organisation using a number from its official website.
What is a “digital arrest”?
It's a scam, not a real legal process. Callers pretending to be CBI, police, customs or TRAI keep victims on a video call, claim they're under arrest and demand money to “clear” their name. Indian police never arrest anyone over a video call.
I already clicked the link or paid. What should I do now?
Call 1930 or report at cybercrime.gov.in straight away, because fast reports can freeze the money. Call your bank to block the card or UPI, change passwords you entered, and uninstall any app the scammer asked you to install.
Where can I report a fraud SMS, call or WhatsApp message?
Report suspected fraud messages and calls on Chakshu in the Sanchar Saathi portal or app from the Department of Telecommunications. Report financial fraud at cybercrime.gov.in or 1930. Unwanted promotional SMS can be reported to 1909.
Does this work for Hindi or Gujarati messages?
It recognises common Hindi words used in scams, and links, phone numbers and UPI IDs in any language. Messages written fully in regional scripts may get fewer matches, so treat a clean result with care.
Why does a normal OTP message show as safe?
Genuine OTP messages contain a code and a warning not to share it, with no link or phone number to contact. The checker recognises that pattern. Still, never share an OTP with anyone who calls or messages you.