GACS Security FAQ

GACS (Global Anti-Crime & Safety) is an independent, public-benefit fraud-education and scam-checking service. We check websites, links, phone numbers, emails, public wallet addresses and social accounts for reported fraud and warning signs. We publish educational resources and direct victims to official reporting agencies. Results are evidence signals, not proof that a person is guilty or a guarantee that a website is safe.

No. GACS is not a broker, exchange, investment platform or crypto wallet. It does not execute trades, hold investment funds or offer trading signals or profit promises. Checking a public wallet address for scam reports does not connect to or control your wallet. Retired trading-tool addresses from an earlier version now redirect to fraud education; they are not current GACS offerings.

No. GACS does not recover stolen funds or charge recovery fees. Optional paid education and impersonation monitoring are separate services, not fund recovery or investments. GACS does not accept payment to add, remove or hide registry entries. Someone promising recovery in our name should be treated as a warning sign.

Never send bank passwords, wallet seed phrases, private keys or payment-card details in a scan, report or email. GACS does not need those secrets to check a scam. Your GACS account sign-in is separate from a scam check. Optional paid services use a payment provider's checkout; a request to transfer money to a wallet to unlock a result is not a GACS scam-check requirement.

SPF lists the servers allowed to send email for a domain. DKIM adds a digital signature that receiving mail services can verify. DMARC checks that a passing SPF or DKIM result aligns with the domain in the visible From address, then tells the receiving service what to do if that check fails. DMARC also supports reports so domain owners can find unauthorized senders or legitimate mail that is misconfigured.

A policy of p=none requests monitoring without asking the receiver to quarantine or reject failing messages. A policy of p=quarantine asks receiving services to treat failing messages as suspicious, often placing them in spam; p=reject asks them to refuse delivery. Receivers apply their own policies, so this is not a promise that every spoofed email will be blocked. Legitimate senders must be checked first to avoid sending genuine messages to spam.

The last recorded DNS check on 25 October 2026 showed p=none, not an enforced quarantine policy. This page does not claim that quarantine is active. A change must be saved in the domain's DNS and verified after it takes effect. All legitimate sending services, including any sending subdomains, must be checked for SPF/DKIM alignment before enforcement is tightened.

No. DMARC helps protect the GACS email identity from direct domain spoofing and can support an organization's email-security review. It does not inspect website code, protect against every lookalike domain or display-name impersonation, or remove AVG, VirusTotal or other website warnings. Website reputation and email authentication are separate checks. Vendor warnings require investigation and the vendor's own reassessment; we do not claim that all vendors have cleared GACS.

Do not disable protection or bypass the warning just because this page says what GACS does. Record the exact address, detection name and time, and contact GACS through a channel you can independently verify. If you believe it is a false detection, use your security vendor's review process. A clean result from one scanner does not override a warning from another.

No. GACS is an independent public-benefit service, not a government agency and not currently a registered nonprofit or charity. Donations are not tax-deductible. Links to official authorities are reporting resources, not endorsements or government accreditation.