JORDAN GALL Enterprise service at small prices
Free scam checker

ScamCheck — Australian Scam Checker

Got something suspicious? Upload the email, paste the text or message, or check a phone number — and get a plain-English verdict in under a minute.

📧 Check an email Upload the .eml or paste it 💬 Check a text Paste the SMS 📞 Check a call Check a phone number 🚩 Report / look up Add or search community reports

Pick an option to scroll to the checker below — then use the tabs in the checker to switch between them.

How ScamCheck works

ScamCheck answers one question: "Did you get something suspicious?" It runs the message or number through a set of plain-English checks and shows every finding with the evidence — never a bare "scam". The verdict is a green (looks genuine), yellow (unverified, check first) or red (treat as a scam) with next steps and links to report it.

What ScamCheck does

  1. Emails: verifies the sender’s domain against the official Australian government domain list, checks SPF / DKIM / DMARC authentication (the digital proof-of-identity that real agencies enforce), inspects every link for look-alike domains and domain age, and matches the wording against known Australian scam patterns.
  2. SMS: classifies the sender number (AU mobile vs short code vs international), checks links the same way as emails, and matches the text against known scam scripts.
  3. Calls: classifies the caller number (mobile vs 13/1800 service line vs international), flags callers that claim to be an agency or bank but are not on their official published numbers, and matches what they said against known scam scripts.
  4. Community reports: report a scam number or website (or confirm a legitimate one). Multiple independent community reports are shown as evidence in checks. Reports never store your IP address or personal details.
  5. The verdict is always plain English with the evidence shown: green (looks genuine), yellow (unverified, check first), red (treat as a scam).

How it checks (what is actually verified)

  1. Official lists: the sender’s domain, links and caller number are checked against curated lists of official Australian government and known-brand domains and contact numbers. Look-alike domains (fake spellings, homoglyphs) are flagged by pattern, not guesswork.
  2. Email authentication: for emails we read the SPF / DKIM / DMARC results that the receiving mail server already computed in the message headers. A forged "From" address that fails these checks is a strong scam signal.
  3. Domain age (live lookup): each link’s domain registration date is looked up via RDAP, the public domain-registry database run by the registrars. Brand-new domains are a classic phishing tell.
  4. Community reports: evidence from other users’ reports of numbers and domains, always shown as supporting evidence, never proof on its own.

There is no AI and no phone-number reputation database: the verdict is deterministic rules plus the lookups above, so the same input always gives the same answer. A green verdict means "no strong scam indicators found", not a guarantee.

Privacy

Important

What ScamCheck checks

Choose the channel, drop in the message or number, and ScamCheck runs it through a set of plain-English checks:

Each finding is shown in plain English with the evidence — never a bare “scam”. The overall result is a green (looks safe), amber (proceed with caution) or red (high risk) verdict, with next steps and links to report it.

Disclaimer: ScamCheck is a heuristic aid, not a guarantee. A green result does not prove safety, and a red result is not proof of fraud — always verify identity through a known, trusted channel before acting. This tool is provided as-is without warranty. If you believe you have been targeted by a scam, report it at reportascam.gov.au.