The check is a page, not a service. When you paste a message, a wallet address, a screenshot's text, or a "deal", the pattern analysis runs in your browser with the engine data embedded in the page; your message text is not uploaded. Wallet addresses, transaction hashes and links it detects are sent to our server and screened against the OFAC sanctions list, public scam and phishing lists, domain registration data and public blockchain nodes. Those sources receive the address or domain, not your message.
What it looks for
Forty-four patterns drawn from public enforcement actions, consumer alerts and reported scams: the guaranteed-return pitch, the urgency clock, the fake exchange domain, the "tax before withdrawal" trap, the recovery-scam follow-up, the romance-to-investment pivot, wallet addresses tied to known laundering paths, and more. Each pattern carries a weight, an explanation, and the counter-move. The verdict is a ranked list of signals, not a single score, so you can see why.
What it cannot do
It cannot confirm a stranger is honest. A clean result means none of the listed patterns matched, not that the deal is safe. It cannot trace money; that is the case desk's job. It cannot see what is on a wallet's chain history without a lookup, which is a separate, optional step that does call a public block explorer.
What to do with a HIGH result
Do not send anything. Do not "test with a small amount". Do not reply to the recovery offer that will arrive a week later. Save screenshots of everything. If you want the full write-up, with every signal, address screening and a PDF you can hand to your bank or the police, the forensic report is $9.95. If money already moved, go to the case desk; the automated free assessment tells you within minutes whether tracing is worth paying for.
Why the engine is public
The same engine runs in our Telegram bot. It is generated from one data file in the repository, so a pattern added once appears everywhere. Anyone can read the patterns; scammers already know them, and victims usually do not.
Questions people ask
Is my message stored?
Your message text is not uploaded; the pattern check runs in the browser. Detected addresses, hashes and links are sent to our server for screening. See our Privacy page.
What does a HIGH result mean?
Strong indicators commonly associated with fraud were found. It is an automated result, not a finding of fraud. Do not send money until you have verified who you are dealing with, and read the ranked indicators for why.
Can it recover money?
No. If money moved, the forensic case desk traces it on flat fees, with honest odds and no promise.