A second opinion for every suspicious message.
Scampilot is your co-pilot through scammy waters - free, in seconds, in plain language, made in Germany. Built by Pixel & Process UG in Lübeck.
Phishing has grown seven-fold in five years. The defences that exist for most people aren’t built for most people - they’re built for security departments.
Scampilot fills the gap in between: the individual in the moment of doubt. Paste a message, get a clear answer - without feeling foolish.
And through the API/MCP layer we hand the same second opinion to the products that want to give it to their own users.
The aviator duck steering you through scammy waters.
Three principles we test every decision against.
Renate first
If a feature doesn't help the 72-year-old recipient, it doesn't ship.
Made in Germany
DE language, DE scam corpus, EU hosting in Frankfurt and Falkenstein. Local where it counts.
Stance over revenue
Free for those who need it most. Payment comes later, elsewhere - never with your data.
A small team from Lübeck.
Scampilot is built and operated by Pixel & Process UG in Lübeck, Germany (HRB 26535 HL) - software engineers who answered one too many "is this real?" calls from their own families.
Layered, curated, honest.
Every message passes the same transparent pipeline.
Layered analysis
Reputation checks (Google Safe Browsing, PhishTank, community blocklists), heuristics for urgency and credential requests, and an AI analysis that automatically escalates when confidence is low.
Curated knowledge base
Our guides and our detection read the same curated dataset - cited to BSI, Verbraucherzentrale, police prevention services and the FTC. Content and detection never drift apart.
Honest verdicts
A single soft signal never forces a "danger" verdict. If the AI provider is down, you still get an answer - flagged as a heuristic fallback. We never invent certainty we do not have.
The data we use - and the data we never touch.
Reputation data from Google Safe Browsing and PhishTank, community blocklists (PhoneBlock, abuse.ch and others), the curated Scampilot knowledge base, and anonymised community reports. IPs are stored only as hashes; message content is never used for AI training and never resold.
"We filter the noise out so people have energy for the real crises."- Pixel & Process UG, Lübeck