Check before
you pay
Paste the store link, IBAN, sender number or social account before you send money, and we'll show you what we found.
47 names we watch for copycat sites
If a link is close to one of these names, the result will warn you.
Logos and trademarks belong to their owners. We show them only because we detect sites that impersonate them; this implies no partnership or endorsement.
The store looks legit.
The site is a week old.
You buy from an Instagram account or a store you've never heard of, or a message lands with a link in it. From the outside it all looks normal; the difference is in details you don't usually see. And if it goes wrong, you have nothing organised to show your bank or the police.
How it works
Paste the link or the message
The store's link, the message you got, or a screenshot of it. You can start without an account.
We open it and check it from several angles
We follow the link to the real page, even if it's shortened, and see what it asks you for and where it sends what you type. Then we check the site's age, name, certificate, host and phishing lists.
You see the result and why
Trusted, suspicious or fraud, with the reason behind it underneath. The decision is still yours.
Every result comes with its evidence
What we actually check
Each check runs on its own and gives a result with a reason, then we combine them into one score. If one check finds something serious, it doesn't get averaged away.
Where the link goes
We open the link from our server and follow every redirect, short links included, until we reach the real page.
What's on the page
We read the page without running it: does it ask for a card or a code, where does what you type go, and is it using a name that isn't its own.
Link tricks
Links written to fool the eye, like absher.sa@another-site, look-alike letters from other alphabets, or free hosting.
Domain age
When was the domain registered? Scam sites are usually days or weeks old.
Impersonation
Is the name close to a bank, a government service or a known store? Like abshr instead of absher.
SSL certificate
Does the site open over an encrypted connection? Who issued its certificate, and when?
Hosting
Which country the server is in, and which company hosts it.
Phishing lists
Is the link on known phishing lists? We refresh them every hour.
Web archive
How long has the site been in the web archive? One that showed up yesterday isn't the same as one that's been around for years.
What we don't do
We don't reveal who anyone is
We tell you whether a link or message shows signs of a scam, and that's it. We don't dig up anyone's name or address; that's for the authorities.
We don't accuse anyone
A result says a link shows warning signs, not that its owner is a scammer. Every signal comes with a written reason you can check.
We don't keep your messages
Messages you check aren't stored, and screenshots are read on your own device and never uploaded to us.
The numbers so far
Counted straight from our database, with nothing about any individual.
Registered users
People who used the site in the last 30 days
Checks since launch
Results that came out as fraud
Results that came out suspicious
Links checked
Messages checked
Screenshots checked
Scam types we recognise in messages
Names we watch for copycat sites
Made in Saudi Arabia
We built it here in Saudi Arabia, because most of the scams we see are local: fake post, bank and Absher messages, written in our dialect.
Reads scam messages written in Saudi dialectKnows the local names scammers pretend to be