Check if a website is a scam — before you click, buy, or pay

Paste the URL into the box above. GACS checks the domain against 12,000+ confirmed scam entries, community reports from the last 24 hours, domain age, SSL records, and brand-impersonation patterns, then gives you a one-line verdict and a 0–100 trust score in about 5 seconds.

Domain registered in the last 90 days, no real contact address, prices 50%+ below market, only crypto / gift cards / wire accepted, urgency tactics (countdown timers, 'last 1 left'), broken or auto-translated English, and pressure to move to WhatsApp or Telegram. Any two of these together usually means scam.

Yes. Every check is free, no account, no per-query limit. Same engine powers the free browser extension and the public API. It will stay free forever — see the Free Forever Guarantee in the site footer.

Paste the URL into the checker. If it flags as scam or suspicious, screenshot the verdict, then: (1) file a chargeback with your card issuer within 60 days, (2) report the URL through /report so the next victim sees the warning, (3) follow the 15-minute panic guide at /panic-guide.

The trust score blends nine signals: blacklist match, community reports, domain age, SSL certificate, brand similarity (typosquats and homographs), AI page-content analysis, hosting reputation, redirect chain, and reported losses tied to the domain. Verdicts under 40 are flagged suspicious; under 20 is almost always a scam.

Yes — the checker is domain-agnostic. The same engine handles shopping scams (fake Amazon/Shein clones), crypto exchanges (drainer fronts), pig-butchering trading platforms, fake delivery sites, and 'recovery service' scams. For wallet addresses specifically, use the crypto scam checker at /crypto-scam-checker.

Yes — copy the link (long-press → Copy on mobile, right-click → Copy link on desktop), then paste it here. The checker also expands shortened URLs (bit.ly, t.co, tinyurl) so you see the real destination before visiting.

Close the tab. Do not click 'unsubscribe' or any other button on the page — those can fingerprint your browser. If you entered a password, change it everywhere you reused it. If you connected a wallet, revoke active token approvals at /revoke-approvals. Then report the URL at /report.