ScamMinder: Website & Message Scam Check

Checks websites and messages for scams. By default only a short hash of the domain is sent; full-page and message checks send more.

ScamMinder tells you whether the website you are on — or a message you received — is a scam, before you pay, sign in or reply. WHAT IT DOES • Toolbar badge and popup — the ScamMinder verdict for the site in the active tab: a label (for example Low Risk, Elevated Risk, Scam), a score, one plain sentence explaining why, and the basis it rests on. • Full report in the side panel — what we found, what the site says about itself, what we could not check, the domain timeline, the stated identity, regulator notices, and whether the address forwards somewhere else. • Full-page warning — shown only for a scam or phishing verdict that has a documented basis (for example a threat-intelligence listing). Go back to safety, or hold the button for 1.5 seconds to continue anyway. You can always dispute a verdict. • Risk ribbon — a dismissible notice at the top of a page rated elevated risk or higher. • Password and payment heads-up — when you focus a password or card field on a risky site, a small card reminds you what we know about it. It never reads what you type. • Search-result markers — a small green, amber or red dot next to results on Google, Bing and DuckDuckGo. Sites we have no report for get no dot. • Check a message or screenshot — paste a suspicious SMS, e-mail or chat message, or upload a screenshot, and get a verdict. • Right-click menu — check a link, a selected piece of text, or the current page. • Trusted sites — turn warnings off for sites you trust. PRIVACY, IN PLAIN WORDS You choose how much leaves your device: • Local only — nothing about the sites you visit leaves your device. The extension matches against an offline list of confirmed scam domains, refreshed every 6 hours. • Domain check (default) — only the first 4 characters of a one-way SHA-256 hash of the site's domain are sent. That names one of 65,536 buckets; the server returns the whole bucket and your browser decides locally. We never receive the domain itself. • Full page check (you switch it on) — the page address without its query string or fragment. Some actions send more, and only when you ask: • "Analyze now" sends the site's hostname to request a fresh analysis. • "Check a message" sends the text you paste; "Check a screenshot" sends the image you choose. • Connecting a ScamMinder account (optional) stores an extension key on your device and sends it to ScamMinder as a request header. Automatic checking is OFF when you install. Until you grant access to the sites you visit and switch it on, a site is checked only when you open the popup or side panel yourself, or use the right-click menu. No ads, no analytics, no telemetry, no remote code. The extension talks only to scamminder.com. We do not sell your data. Full privacy policy: https://scamminder.com/privacy Questions: support@scamminder.com