The check is a page, not a service. When you paste a message, a wallet address, a screenshot's text, or a "deal", the analysis runs in your browser with the engine data embedded in the page. Nothing is uploaded. That is why it is free, and why it works when you are standing in a parking lot with one bar of signal.
What it looks for
Forty-three patterns drawn from real cases: the guaranteed-return pitch, the urgency clock, the fake exchange domain, the "tax before withdrawal" trap, the recovery-scam follow-up, the romance-to-investment pivot, wallet addresses tied to known laundering paths, and more. Each pattern carries a weight, an explanation, and the counter-move. The verdict is a ranked list of signals, not a single score, so you can see why.
What it cannot do
It cannot confirm a stranger is honest. A clean result means none of the listed patterns matched, not that the deal is safe. It cannot trace money; that is the case desk's job. It cannot see what is on a wallet's chain history without a lookup, which is a separate, optional step that does call a public block explorer.
What to do with a HIGH RISK verdict
Do not send anything. Do not "test with a small amount". Do not reply to the recovery offer that will arrive a week later. Save the PDF. If money already moved, go to the case desk; the automated free assessment tells you within minutes whether tracing is worth paying for.
Why the engine is public
The same engine runs in the Telegram bot and on nil33.com. It is generated from one data file in the repository, so a pattern added once appears everywhere. Anyone can read the patterns; scammers already know them, and victims usually do not.
Questions people ask
Is my message stored?
No. The check runs in the browser; the page makes no upload.
What does HIGH RISK mean?
Several weighted fraud patterns matched. Do not send money, and read the ranked signals for why.
Can it recover money?
No. If money moved, the forensic case desk traces it on flat fees, with honest odds and no promise.