Free scam checker — websites, crypto wallets & social profiles

A scam checker is a tool that takes a URL, wallet address, phone number, or pitch text and tells you whether it matches known scam patterns. GACS aggregates 12,000+ confirmed scam sites, 50,000+ flagged wallets, and fresh community reports into a single one-click verdict.

Every entry in the blacklist is community-verified, and the AI second-opinion is grounded only in the signals it can prove (domain age, certificate data, on-page text). The checker will say 'suspicious' rather than 'safe' if it cannot find enough evidence — never trust a tool that gives 100% certainty about a fresh domain.

Yes. It detects pig-butchering sites, fake exchanges, wallet drainers, romance-scam links, recovery-scam pages, fake giveaways, and rug-pulled tokens. For wallets specifically, use the dedicated wallet checker.

Free for everyone, no account required, no API key, no per-day limit for normal use. The same engine powers the browser extension and the public /api/public/check-domain endpoint.

Because honest detection has to admit uncertainty. A 30-day-old domain hosting a copycat exchange is suspicious — it might be a scam, or it might be a brand-new legitimate service. The checker shows you the evidence so you can make the call.

Check four things: domain age (under 90 days is a red flag for finance/shopping sites), HTTPS certificate issuer and age, whether the brand name is a lookalike of a real one, and whether the site appears in the GACS blacklist or in fresh community reports. The scam checker runs all four in one pass.

The checker itself does not recover funds, but reporting the scam URL and wallet adds it to the public registry so future victims are warned. For recovery, file with your bank, the receiving exchange, and law enforcement — and avoid 'recovery services' that contact you first, since those are almost always recovery scams themselves.

Yes. Paste the suspicious link from the email or text into the checker. It evaluates the domain, redirect chain, and any cloaking, then matches against known phishing kits. For the message text itself, the AI second-opinion flags urgency, impersonation, and credential-harvesting patterns.

Yes — paste the invite link, channel URL, or any shared link from the chat. The checker resolves the destination, scans the landing page, and cross-references the handle or group against the GACS social-impersonation database.

Don't reply, don't click further, don't pay any 'cancellation' or 'release' fee. Screenshot everything, report to the platform (registrar, exchange, social network), file with your local cybercrime unit, and submit the scam to GACS so others are warned in search results within minutes.

Paste the exchange URL into the scam checker. It flags fake exchanges by comparing the domain age, SSL issuer, and brand-similarity score against the real exchange, then checks whether the deposit wallet appears in the 50,000+ flagged-wallet database. Withdrawal-blocking scams are the #1 pattern — if the site is under 6 months old and asks for a 'tax' or 'verification fee' before you can withdraw, it is a scam.

Paste the wallet address into the wallet checker. GACS tracks 50,000+ addresses across Bitcoin, Ethereum, BSC, Tron, Solana, and Polygon that have received funds from confirmed pig-butchering, romance, recovery, drainer, or rug-pull scams. Verdict is instant and free.

Yes. No legitimate exchange, broker, fund, or token offers guaranteed daily, weekly, or monthly returns. Any pitch with the words 'guaranteed,' 'risk-free,' 'AI trading bot with 2% daily,' or 'arbitrage with no losses' is a scam — usually pig-butchering or a fake yield platform.

Sometimes. The checker flags new tokens whose contracts have mint functions, owner-only sells, blacklist functions, or unlocked liquidity — all common rug-pull signals. It will not predict a deliberate exit by a determined team, so always treat unaudited tokens as high-risk.

Right-click the link, copy the address, and paste it into the scam checker. Do not click. The checker resolves any redirects, evaluates the final domain, and matches it against known phishing-kit fingerprints (Microsoft 365, Google Workspace, Coinbase, MetaMask, banking).

Copy the link from the message and paste it into the scam checker. Common smishing patterns flagged: fake delivery notices (DHL, USPS, Royal Mail), toll-road and parking fines, bank fraud alerts, tax refunds, and 'package held at customs.' Never reply STOP — that confirms the number is live.

Always. No legitimate wallet, exchange, airdrop, or support team will ever ask for your 12 or 24-word seed phrase. Any site, popup, DM, or 'support agent' requesting it is a wallet-drainer scam. Close the tab and revoke approvals on revoke.cash if you have already connected.

Act in the first 24 hours. For bank transfers and cards, call your bank's fraud line immediately and request a recall or chargeback. For crypto, file with the receiving exchange (most major exchanges freeze flagged deposits within hours of a credible report). Then file with your national cybercrime unit (FBI IC3 in the US, Action Fraud in the UK, local police elsewhere) and submit the scam to GACS so the wallet and domain are publicly flagged.

Almost never. Any service that contacts you first — by DM, email, comment, or phone — claiming they can recover your stolen crypto is a recovery scam. They charge an up-front 'tracing fee' or 'lawyer retainer' and disappear. Legitimate options: your bank, the receiving exchange's compliance team, licensed attorneys, and law enforcement.

Yes. Every report shortens the time the scam survives in search results, ads, and social feeds. A single report can prevent dozens of future losses. Submit the URL, wallet, or handle at gacs.app/report-scam — it is free, anonymous, and takes 30 seconds.