ScamShield — Scam & Phishing Protection

On-device scam & phishing protection: warns you, spots brand look-alikes, checks messages. Nothing leaves your device.

ScamShield warns you before a scam or phishing page tricks you — entirely on your device. It reads more than the address bar: it looks at the page's wording, layout and login form, and it recognises when a page is wearing a brand's icon or logo on the wrong domain, so it catches convincing look-alikes that a URL-only checker would miss. Got a suspicious WhatsApp, SMS or email? Paste it into the popup for an instant, private verdict. One click gets you back to safety: *Leave this page* on a dangerous warning, or *Take me to the real site* on a brand-impersonation page. If ScamShield gets it wrong, *Trust this site* for an hour, until tomorrow, or always — and *Report a mistake* in one tap. Private by design: nothing you browse, type or check ever leaves your device. The only network activity is downloading the public threat-feed file, and — only if you opt in — sending an anonymized host name and risk signal for a flagged page. About 0.6 MB, with no heavy runtime bundled in. Features: • Real-time phishing & scam warnings with plain-language reasons • Page analysis: an on-device model reads the page itself — wording, layout, login forms — to catch brand-new phishing pages, not just known-bad URLs • Brand look-alike detection: icons and logos hash-matched against a 64-brand table (49 with icon hashes), including UAE banks, telcos and government services (Emirates NBD, ADCB, FAB, Mashreq, e&, du, Noon, UAE PASS, MOHRE, Dubai Police…) • Scam message checker: paste any SMS/WhatsApp/email text for an instant, fully-private verdict • Detects fake login forms that send your password to another site (single-sign-on logins via Google/Microsoft/Okta are recognized as safe) • One-click rescue: *Take me to the real site* on brand-impersonation pages, *Leave this page* on any dangerous warning • Trust a site for 1 hour, until tomorrow, or always — and report a mistake in one tap • Blocks known scam domains — refreshed daily from an open-source feed (OpenPhish + URLhaus, heavily filtered against false positives) • Crypto-wallet guard: warns before risky approvals & blind signatures; blocks recovery-phrase theft • Clipboard-hijack guard: warns when a site copies a command to your clipboard • Tech-support scam guard: breaks the "your PC is infected, call this number" pop-up trap and helps you escape • Hides fake prize/giveaway scam content • Protection history and stats, stored only on your device; dark mode • Optional community reporting, off by default — never URLs or page text • Smaller and faster: ~0.6 MB unpacked, no heavy runtime • 100% on-device analysis — no tracking, no data collection **What's new in 0.5.0 (since the 0.3.1 store version):** Page analysis (an on-device model reads the page itself), brand look-alike detection by icon (64-brand table, 49 with icon hashes, incl. UAE banks/telcos/government), a real threat feed on by default, the scam message checker, protection history and a "Take me to the real site" rescue button, a redesigned popup and settings with dark mode, a ~0.6 MB package (was 14 MB — the ONNX runtime is gone), and optional off-by-default community reporting. No new permissions; your settings, trusted sites and history carry over.