Skip to content
Phishing & scam detector

Is this message a scam?

Paste a suspicious email, SMS, link, or photo. Scampilot answers in seconds - in plain language, with concrete next steps.

Try an example:
Photo, text or link - not stored · servers in the EU

Free, no account · GDPR compliant · Servers in the EU · No data resale

Scampilot - Is this message a scam? | Product Hunt
01
under 5 sec

From paste to verdict. p95 on English text under 4 KB.

02
6 surfaces

Paste, email, Telegram, browser extension, REST API, MCP server.

03
€ 0

Free for individuals - no tiers, no ads, no data resale.

01
The problem

Spam filters catch the obvious mails. Nobody catches the expensive ones.

The mails that actually cost money look like your real bank, your real courier, your real tax office.

Phishing attacks have grown seven-fold in the last five years. The defenses that exist for most people aren't built for most people.

Classic spam filters recognize patterns - bulk lists, primitive trick phrases, known phishing domains. They work great on the 95 % nobody would seriously consider.

The mails that actually cost money look different. A carefully crafted message that knows your name - a content filter has no chance against it.

If I could already tell, I wouldn't be asking.
- Renate, 72
Eval dataset 30 hand-labelled fixtures, 10 safe / 10 warn / 10 danger. Current hit rate: 30/30.
02
The product

One tool. Six surfaces. One dashboard.

Reports stream in live as they finish. Forwarding address up top, daily quota right, history below. Full tour →

scampilot.de/dashboard

Reports land here whenever your mom forwards a mail to your burner alias.

Your Scampilot inbox

Forward suspicious mails here - report comes back.

mara.r7q3@in.scampilot.de
Daily quota

18 / 20

Live
  • Likely a scam

    Fake Sparkasse mail asking for a password.

    INBOUND · 2 min ago · 94/100

  • Be careful

    Newsletter with an unknown tracking link.

    INBOUND · 1 h ago · 67/100

  • Looks safe

    Real DHL shipping notification.

    PASTE · yesterday · 92/100

03
The surfaces

Wherever the message comes from - Scampilot is already there.

One analyzer, six adapters. You don't have to install anything to start.

01

Paste & check

Text box at /check. No account needed. Up to 3 checks per day free - free account: 50/day. Rate limit on hashed IPs - no cookies, no fingerprinting.

02

Personal forwarding inbox

With an account, your own forwarding address plus burner aliases. Forward - verdict comes back as email.

03

Telegram bot

@scampilot_bot: paste or forward, verdict comes back as a chat reply. /link <code> ties the chat to your account.

04

Browser extension

Available in the Chrome Web Store. MV3: toolbar click scans the page; right-click text, link, or image → "Check with Scampilot". Verdict in the side panel - including QR-code detection.

05

REST API

JSON in, JSON out. Sanctum bearer token with ability scopes, OpenAPI spec live at /docs/api, per-user shared-bucket rate limit.

06

MCP server

Tooling for Claude, Cursor & co. Tools scan_text, scan_url, scan_email, scan_image, scan_qr, scan_links - HTTP.

Browser extension

Check any page without leaving it.

The Chrome extension scans the current URL from the toolbar and shows the verdict in the side panel. Right-click text, links, or images - including QR codes on the page.

Phone scam check

Is this number a scam?

Missed call from a number you don't know? Check it against premium-rate ranges and thousands of community-reported scam callers - before you call back.

04
The people

If a feature doesn't help all three of these people, it doesn't ship.

Three people, one tool. Every product decision gets tested against these three.

Persona 01Senior recipient

Renate, 72

Gets phishing mails every week. Wants someone to tell her plainly - without feeling foolish.


Needs Big input field, clear answer, no app install.

Senior setup →

Persona 02Family hotline

Mara, 38

Answers her mom's "is this real?" calls. Needs something she trusts when she's unreachable.


Needs Burner aliases per family member, read-along view, technical reasoning.

Burner aliases →

Persona 03Integrator

Theo, 32

Building phishing protection into mailers and AI agents. Wants JSON in, JSON out - and an MCP server for Claude.


Needs Stable contracts, OpenAPI spec, predictable quotas, no lawyer for the contract.

API docs →

Frequently asked questions

How do I check whether a message is a scam?

Paste the suspicious email, SMS, link, or QR code above. Scampilot returns a verdict in under 5 seconds - safe, warn, or danger - with the reasons and concrete next steps.

What kinds of scams does Scampilot detect?

Phishing emails, fake SMS (smishing), malicious links and fake shops, QR-code scams (quishing), premium-rate numbers and reported scam callers - plus tactics like grandparent, romance and invoice fraud.

Is Scampilot really free and account-free?

Yes. Up to 3 checks per day need no account and carry no ads. A free account raises that to 50 checks per day. No data resale, EU servers.