ScamSavvy

Is this a scam?

Paste a suspicious text, email, or DM. ScamSavvy shows you exactly which parts look wrong — and your message never leaves your iPhone.

Coming to the App Store Ask about the beta

iPhone · iOS 26 or later

Three steps, ten seconds

No account. No sign-up. Nothing to configure.

Paste or share it

Copy the message, pick a screenshot, or send it straight from Messages and Mail with the share sheet.

We check it on your phone

Links, urgency tactics, payment demands, impersonation — checked against a catalogue of known scam patterns in ten languages.

See the evidence

You get a risk level, the exact phrases we matched highlighted inside your own message, and what to do next.

What makes it different

🔒

Nothing leaves your phone

The whole check runs on your iPhone. Your messages are never uploaded, never stored on a server, never seen by us. That is not a setting — it is how the app is built.

🔍

It shows you the evidence

Not just a verdict. We highlight the exact words inside your own message that matched, so you learn the pattern and can spot the next one yourself.

👤

Set it up for a parent

One tap turns on larger text, higher contrast and a simpler result screen — designed for someone who wants an answer, not a dashboard.

What it looks for

Every finding comes with the phrase that triggered it, so you can judge for yourself.

Patterns are compiled from public advisories including the FTC, Europol and national cybersecurity centres, and cover English, Turkish, German, French, Spanish, Portuguese, Japanese, Korean, Arabic and Hindi.

Honest about what it can and cannot do

ScamSavvy gives you a risk assessment, not a guarantee. A clean result means we did not find the patterns scammers usually use. It does not mean the message is safe.

Every result — including a clean one — ends with the same advice: if you are unsure, contact the company through its official channel, never through the message.

ScamSavvy never opens a link from your message. When it offers to open a company’s website, it uses that company’s own address.