How Scam Scanner detects scams
Scam Scanner decides how risky a message is by combining four signals — the content of the message itself, a database of brands that scammers impersonate, Australian scam-pattern matching, and AI analysis — and expresses the result as a 0–100 trust score with the specific red flags it found. It is built to help you make a faster, better-informed decision, not to replace verifying with the organisation directly.
This page explains exactly how that works: the detection pipeline, how we frame the result, where our information comes from, how the guidance on this site is researched and reviewed, and — importantly — what the tool cannot do.
The detection pipeline
Every scan runs through the same sequence of checks, whether it starts from pasted text, a link, an email, a screenshot, a QR code, or a photo:
- Read the content. The message is classified by type (a delivery text, a bank alert, an invoice, and so on). For camera captures, an on-device Vision classifier first works out what the image actually is before anything is analysed.
- Check it against the brand-impersonation database. Around 93 brands relevant to Australians are recorded with their genuine domains and SMS sender IDs, so a lookalike domain or a sender a real brand would never use can be flagged.
- Match known Australian scam patterns. The message is compared against the recurring tactics behind local scams — fake redelivery fees, unpaid-toll texts, “move your money to a safe account”, gift-card and cryptocurrency demands.
- Analyse with AI. The content and those signals are passed to an AI model through a secure proxy, which weighs them together and explains its reasoning. The detection logic lives in the app; the proxy only forwards the request.
- Return a score, the red flags, and next steps. The output is a 0–100 trust score, the specific warning signs found, and what to do next.
The trust score and its four verdicts
Rather than a blunt yes/no, Scam Scanner returns a trust score from 0 to 100 and sorts it into four verdicts — Safe (80–100), Caution (55–79), Suspicious (25–54) and Scam (0–24). This is deliberate: most real-world messages sit in a grey area, and a score with reasons lets you judge how much caution a specific message warrants instead of trusting a single label.
A high trust score means no obvious red flags were found — it is not a guarantee a message is genuine. The safest habit with anything involving money, logins or personal details is to verify directly with the organisation, however a check came out.
Accuracy and limitations
No automated scam checker is right every time, and we think it is more useful to be clear about that than to imply certainty. Scam Scanner can be wrong in both directions: a carefully crafted scam can score better than it should (a false negative), and a genuine but unusual message can be flagged as suspicious (a false positive).
So treat the result as informed decision-support, not a verdict. In particular:
- A low-risk result means “no obvious red flags found”, not “definitely safe”.
- Anything that asks for money, a payment, a login or a one-time code should be verified directly with the organisation through a channel you find yourself — never a link or number from the message.
- Scam Scanner is general information for Australians; it is not legal or financial advice.
Where our information comes from
The guidance on this site is grounded in Australian consumer-protection sources and a maintained brand database — not opinion. Our reporting advice and scam-pattern knowledge draw on the national bodies that track and act on scams:
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Report scam texts and spam SMS or calls.
- Forward to 7226 (SPAM) — Forward the scam SMS to short code 7226 so your carrier can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
The brand-impersonation database records each brand's official domains and sender IDs from the brand's own published channels, so the comparison a scan makes is to verified facts rather than guesswork.
How we research and review our guides
The cornerstone guides and scam-type explainers are written and reviewed by Reuben Schultz, the founder of Scam Scanner.
The per-brand “is this a scam?” pages are composed from that verified brand database, and no brand page is published until it passes a human review gate. Our governing rule is simple: we document only what we can verify — official domains, sender IDs, real reported scam patterns — and never invent brand facts, ratings or statistics to fill a page.
How we keep this current
Scam tactics change constantly, so every guide and brand page carries a visible “last updated” date, and we revise the guidance when a brand's genuine details change or a new scam pattern starts circulating in Australia. If you spot something out of date or incorrect, tell us at support@tryscamscanner.com.
Check a message now
Paste a suspicious text, email, link or QR code and get an instant trust score with the red flags explained — free, no signup.
Frequently asked questions
How accurate is Scam Scanner?
Scam Scanner is decision-support, not a guarantee. It combines the content of a message, a brand-impersonation database, Australian scam-pattern matching and AI analysis to produce a 0–100 trust score and the specific red flags — but no automated checker can be right every time. Treat a low-risk result as 'no obvious red flags found', not proof a message is safe, and always verify anything involving money or personal details directly with the organisation through a channel you find yourself.
Can Scam Scanner be wrong?
Yes — in both directions. A cleverly written scam can score better than it should (a false negative), and a genuine-but-unusual message can be flagged as suspicious (a false positive). That is why the result is framed as a trust score with reasons rather than a flat yes/no, and why we always recommend verifying through an official channel before you act on anything important.
Does Scam Scanner store my messages or photos?
Scam Scanner only ever needs the content required to assess whether something is a scam, and camera or screenshot analysis is designed to process images for scam signals rather than collect them. You should never share passwords, full card numbers or one-time codes to check a message — a genuine check never requires them.
Who writes and reviews the guidance on this site?
The cornerstone guides and scam-type explainers are written and reviewed by Reuben Schultz, the founder of Scam Scanner. The per-brand pages are composed from a verified database of each brand's official domains and sender IDs, and no brand page is published until it passes a human review gate. We document only what we can stand behind — we never invent brand facts, ratings or statistics.
Scam Scanner provides general information to help Australians assess suspicious messages — it is not legal or financial advice. If you've lost money or shared details, contact your bank and report it to Scamwatch (scamwatch.gov.au) straight away.