Scam Message Checker

Paste a text, email or WhatsApp message to see which scam warning signs it shows, each with its official UK or US source. It runs in your browser.

Reviewed by Dany, RightSums team · Updated

Runs in your browser. Free, no sign-up.

personal-finance · Daily life · UK & US

Paste the message, pick who it claims to be from, how it arrived and your country. The checker looks for the warning signs that the NCSC, Stop! Think Fraud, Take Five, HMRC, the FTC, the IRS and USPIS describe: pressure to act fast, requests for one-time passcodes, "safe account" transfers, gift card or crypto payments, parcel fees, tax refund offers, "Hi Mum, new number" messages, task job offers, guaranteed returns, remote access apps and requests for secrecy. Every web address is checked for lookalike names, link shorteners, IP addresses, punycode and http://. Each sign quotes the words that triggered it. The result is a risk level and the steps to check and report the message. It never says a message is safe, and the message is not sent anywhere.

Accepted inputs

  • The message: a text, email, WhatsApp or social media message, or what a caller said
  • Who it claims to be from (optional): bank, delivery company, HMRC or the IRS, family member, employer or recruiter, marketplace buyer, crypto or investment firm, government service, streaming or subscription service, other
  • How it arrived: text, email, WhatsApp or social media, phone call
  • Country: UK or US (follows the site region by default)

Outputs

  • Risk level: high, medium, or no common warning signs found (which does not mean safe)
  • Warning signs grouped by severity, each quoting the words that triggered it
  • A plain explanation and the official source for every sign
  • Each web address with the domain in bold and what is wrong with it
  • What to do now, with official reporting routes for the UK or US
  • Link to the Scam Recovery Planner if you already paid or shared details
  • Copy result and Save buttons

How to use the Scam Message Checker

  1. Paste the message and choose who it claims to be from, how it arrived and your country, the UK or the US.
  2. The checker compares the wording with warning signs described by the NCSC, Stop! Think Fraud, Take Five, HMRC, the FTC, the IRS and USPIS, and quotes the words that match each one.
  3. Every web address in the message is checked for lookalike names, link shorteners, IP addresses, punycode, a brand that does not match the domain and http:// links, and official HMRC, GOV.UK, IRS and USPS addresses are recognised.
  4. You get a risk level, the signs grouped by severity and the steps to check the message and report it, and the check never says a message is safe.

Frequently asked questions

How can I tell if a text message is a scam?

Look for pressure to act fast, a link, a fee to pay, or a request for a code, PIN or bank details. Stop! Think Fraud lists these as signs of a fake text. Do not tap the link or reply; contact the company using a number or website you find yourself, and forward the text to 7726.

Is this parcel delivery text a scam?

A text asking for a fee before a parcel is delivered is a common scam. The example "unpaid postage fee of £1.45, pay within 24 hours" with an http:// link scores high risk here, with 4 warning signs: the fee, the 24-hour deadline, the link and the unencrypted address. Check the order in the retailer's own app.

Does HMRC send texts about tax refunds?

No. HMRC says it will never send a notification of a tax rebate or ask for personal or payment information by text message, and it only emails about rebates from addresses ending in hmrc.gov.uk. Forward suspicious HMRC texts to 60599 and emails to phishing@hmrc.gov.uk, then check your tax in your HMRC online account.

Would my bank ask me to move money to a safe account?

No. Take Five lists being asked to move money to a new or "safe" account as a sign of fraud, and the FTC says never move your money to protect it. Hang up and call your bank on the number on your card. In the UK you can also dial 159 to reach your bank.

If the checker finds no warning signs, is the message safe?

Not necessarily. The checker looks for common warning signs, and scammers change their wording, so a message with none can still be a scam. Before you act on any unexpected message, contact the sender using details you already have, such as the number on your card or a relative's saved number.

Sources

The rates and rules in this tool come from:

Guides that use this tool

Terms explained

  • APP fraud reimbursement: APP fraud reimbursement makes UK banks refund victims of authorised push payment scams up to £85,000 for Faster Payments and CHAPS transfers made on or after 7 October 2024.
  • Phishing: Phishing is a scam email, text or call designed to trick you into visiting a fake website, giving away personal or bank details, or installing malware.

Related tools

  • Scam Recovery Planner

    Sent money to a scammer? Get an ordered, dated plan for the UK or US: who to call first, the official numbers, and the real deadlines for claims and disputes.

  • Complaint Route Finder

    A company won't sort out your problem? See who to complain to next in the UK or US, how long to wait, the deadline to escalate and a letter to send.