Scamwise Checks Suspicious Messages Before You Take the Bait

Scamwise scam checking shown through an email phishing hook on smartphone

Written by

in

Updated November 2, 2026 at 2:48 PM ET

Scamwise gives website owners and marketers a quick first check for suspicious emails, websites, phone numbers, images and real-world situations. Savi’s free service examines submitted material for signs of fraud, explains its reasoning, cites the information used and recommends what to do next.

The service works through any web browser on a desktop, mobile device or tablet without requiring an account. It is also included in the Savi app for iOS and Android, although that app is currently available only in the United States.

What happened

According to Help Net Security, Savi launched Scamwise as a free scam-checking service for examining suspicious messages, emails, websites, phone numbers, images and real-world situations. The browser-based service requires no account, and the Savi app version is currently limited to the United States.

Website owners and marketers should heed the alert because suspicious domains, phishing emails and fraudulent phone numbers can affect a site’s credibility, customer trust and search visibility. Scamwise provides a structured way to inspect suspicious material before acting on it.

Are you affected?

Scamwise is relevant to anyone who receives suspicious emails, encounters questionable websites, receives unwanted calls or wants to assess an image or a described incident. Website owners and marketers can use it to investigate suspicious links, sender details, attachments and domains that may appear in customer communications or online threats.

According to the source, users can paste text, enter a URL or phone number, upload an image or screenshot, describe an incident, use voice input, or forward an email to submit@scamwise.com. The service does not require personal information to produce a result and does not contact the person submitting material or the sender named in it.

The source does not identify specific browser, mobile, iOS or Android versions affected, because Scamwise is a checking service rather than a software vulnerability. It also does not state that a website owner is affected merely because a scam uses or impersonates a website. The source does not say that Scamwise checks whether a site’s search rankings, technical health or search visibility have been harmed.

What to do now

  1. Open Scamwise in a web browser on a desktop, mobile device or tablet, without creating an account.
  2. Submit the suspicious material through the available input method: paste text, enter a URL or phone number, upload an image or screenshot, describe the incident, use voice input, or forward the email to submit@scamwise.com.
  3. Review the verdict, the reasoning, the recommended next steps and the listed sources. Treat an automated verdict as a first check rather than a guarantee.
  4. If the result identifies a scam, follow its guidance. Help Net Security’s example assessment advised against opening the attachment or replying, and recommended deleting and reporting the message.
  5. For an indeterminate phone-number result, verify an expected caller through another trusted channel and do not respond to unsolicited contact.

How does Scamwise assess suspicious material?

Scamwise evaluates language patterns, behavioral signals, sender details, link structure, domain age, website reputation and phone-number risk indicators. It compares those findings with scam-intelligence sources and relevant web results.

The service then presents a verdict, explains the reasoning behind it, recommends what to do next and lists the sources used during the assessment. This gives users more context than a simple warning label and helps them decide what action to take.

What can Scamwise check?

The service accepts several forms of evidence:

  • Text pasted directly into the service
  • A URL or phone number
  • An uploaded image or screenshot
  • A written description of an incident
  • A voice submission
  • An email forwarded to submit@scamwise.com

It runs in any web browser and does not require an account. The service is also part of the Savi app for iOS and Android, which is currently available only in the United States.

What did Help Net Security find?

Help Net Security said each analysis in its testing took only a few seconds, although processing time may vary by submission. The source’s test covered a suspicious email, a legitimate company website and an international phone number.

The suspicious email impersonated a Croatian government agency but came from a Spanish university domain and included a PDF attachment. Scamwise returned a “Definitely a scam” verdict, citing the sender-domain mismatch, suspected malicious file and reports of a related phishing campaign. It advised the user not to open the attachment or reply, and recommended deleting and reporting the message.

For the legitimate company website, Scamwise returned a “Definitely legitimate” verdict. Its explanation referred to the organization’s published information, industry presence, external search results and domain-reputation data.

A phone-number lookup for a number from Mali produced an “Indeterminate” verdict because Scamwise could not establish the number’s reputation or origin without additional context. Its guidance was to avoid responding to unsolicited contact and verify an expected caller through another trusted channel.

Why does transparent reasoning matter for website audits?

A scam assessment helps reviewers understand why a message, domain or number was flagged and which response was recommended. The listed sources and identified signals show why a message, domain or number was flagged and which practical response was recommended.

Automated verdicts should complement independent verification and sound judgment. The indeterminate phone-number result illustrates the limits of an automated check when there is not enough context to establish a number’s reputation or origin.

FAQ

What is Scamwise?

Scamwise is a free scam-checking service from Savi that checks suspicious messages, emails, websites, phone numbers, images and real-world situations for signs of fraud.

Do I need an account to use Scamwise?

No. Scamwise works in any web browser on a desktop, mobile device or tablet without requiring an account. It is also included in Savi’s iOS and Android app, which is currently available only in the United States.

How can I submit suspicious material to Scamwise?

You can paste text, enter a URL or phone number, upload an image or screenshot, describe an incident, use voice input, or forward an email to submit@scamwise.com. The service returns a verdict, explains its reasoning, recommends what to do next and lists the sources used.

This article reports on publicly available information from the sources listed below. We have no reason to believe it is inaccurate, but we have not independently verified every claim, and details may change as the story develops.

Sources