Why Scampilot exists.
Scam messages hit hardest the people least equipped to fight back. Scampilot is the calm second opinion everyone deserves - in seconds, in plain language.
The mission
Every suspicious message should get a clear, honest answer in under five seconds: safe, suspicious, or dangerous - with reasons in plain language. Free for individuals, no advertising, no data resale.
Who is behind it
Scampilot is built and operated by a small team in Berlin, Germany. We are software engineers who answered one too many "is this real?" calls from our own families - and turned that into a product. Servers run in German data centres and the product is built GDPR-first.
How we check
Layered analysis
Every message passes reputation checks (Google Safe Browsing, PhishTank, community blocklists), heuristics for urgency and credential requests, and an AI analysis that automatically escalates when confidence is low.
Curated knowledge base
Our guides and our detection read the same curated dataset - cited to BSI, Verbraucherzentrale, police prevention services and the FTC. Content and detection never drift apart.
Honest verdicts
A single soft signal never forces a "danger" verdict. If the AI provider is down, you still get an answer - flagged as a heuristic fallback. We never invent certainty we do not have.
What we work with
Reputation data from Google Safe Browsing and PhishTank, community blocklists (PhoneBlock, abuse.ch and others), the curated Scampilot knowledge base, and anonymised community reports. IPs are stored only as hashes; message content is never used for AI training.