Works with websites, emails, and companies or sellers — the AI identifies which one you submitted and checks it accordingly.
🔒 What you paste is never stored, logged, or shared. Analysis runs server-side and is discarded immediately after your result is returned. Scamanot provides information to assist your own judgment. We do not guarantee the accuracy of findings or the legitimacy of any entity investigated.
The Quick Answer
Before you click, buy, or reply — check these four things.
Whatever just landed in front of you, these checks take under a minute and catch most scams on their own:
Not the display name — the full email address, or the full URL. Spoofed domains almost always have a small, easy-to-miss difference.
On desktop, hover any link to see where it actually goes. On mobile, press and hold. If the destination doesn't match the claim, stop.
HTTPS and a padlock icon are not proof of legitimacy — anyone can get those free in minutes. A verifiable address and named leadership carry more weight.
"Act now," "your account will be suspended," "this offer expires in an hour" — manufactured urgency exists to stop you from checking. Slow down instead.
Section 1 of 3
Is this website legit?
Domain age is one of the strongest signals — a site claiming years of trusted history that was registered last month is a serious red flag. Beyond that, check for a real physical address, reviews on independent sites like the BBB or Trustpilot (not testimonials on the site itself), and standard payment security. One common misconception worth correcting directly: a scam site can have HTTPS too. The padlock icon means your connection is encrypted, not that the business behind it is honest — free certificates are available to anyone in minutes. Read the URL itself for lookalike domains and odd extensions before you trust anything else on the page.
Want a deeper, URL-specific technical check? Use the dedicated URL Safety Investigator — this tool is the broader front door; that one goes deeper on links alone.
Section 2 of 3
Is this email legit?
Start with the sender's actual email address, not the display name — anyone can set a display name to say "Facebook Security" or "Apple Support." The real signal is the domain after the @ symbol. Spoofed domains are usually close but not exact: facebookmail.com versus facebook-secure-mail.com, or accounts.google.com versus a domain that merely mentions Google somewhere in the string. Most real brands will never ask for your password or payment details by email, and legitimate account alerts don't usually come wrapped in urgent countdown language.
This is the most common "is this legit" search pattern by far — the same question asked over and over about a slightly different brand: an Instagram or Facebook "security" notice, an Apple or Google account alert, a PayPal or Venmo notification, a Microsoft or Xfinity account warning, even a class-action settlement email. The check is the same every time: read the actual sending domain, not the name on the message.
Section 3 of 3
Is this company legit?
Look for named leadership and a verifiable physical address — not a P.O. box or a virtual office listed as headquarters. Cross-reference the company name against the BBB and Trustpilot rather than relying on testimonials posted on the company's own site, which are easy to fabricate. Pay close attention to how they ask to be paid: wire transfer, gift cards, or cryptocurrency-only requests are a serious warning sign, since standard payment processors like Stripe or PayPal come with fraud protection that scammers specifically try to avoid.
Recurring Patterns
Common "is this legit or scam" situations.
Check for a real return policy, an address, reviews off-site, and prices that aren't dramatically below every competitor — that's usually the tell.
Unusually high pay for simple work, no real interview, and any request for bank details or an upfront "equipment fee" are all classic advance-fee patterns. See the Job Offer Investigator for a dedicated deep check.
Guaranteed returns, urgency to invest immediately, and vague explanations of how the money is actually made are the pattern behind nearly every investment scam.
Look for clear cancellation terms stated up front. Services that make it hard to find how to cancel before you've even signed up are telling you something.
Consolidated
Red flags that apply everywhere.
"Act now," countdowns, threats of suspension or legal action — designed to stop you from thinking it through or checking with someone else.
Legitimate organizations rarely ask you to confirm a password, card number, or SSN over email, text, or an unsolicited call.
The name looks right; the actual domain after the @ symbol doesn't match the real organization.
If the deal, the job, or the investment return looks far better than everything else in the market, there's usually a reason.
Scamanot provides information to assist your own judgment. We do not guarantee the accuracy of findings or the legitimacy of any entity investigated.
Don't Guess
Investigate it before you trust it.
Every check above takes real effort to do manually, every time. Paste it into the tool instead and get a structured verdict in seconds.
Check It Now ↑Common Questions
What people ask before they check.
Why Scamanot Exists
Built by someone who's been there.
Scamanot was founded by Robert Scott Singleton — 63 years old, online since 1992, and a scam victim more times than he cares to count. Car dealers. Email schemes. Fake online sellers. He watched fraud grow from an obscure curiosity into a billion-dollar catastrophe targeting everyday people.
"When it happens, you don't say anything. You just go quiet. Forget about it. Move on. That's what I did for decades. That's what most people do. And that silence — that's exactly what scammers are counting on."
So he built something about it. Every tool on Scamanot is AI-powered, free to use, and built on one principle: nobody should have to just go quiet and move on. Your searches are never stored. The AI runs server-side only. We find the truth. We never expose yours.
