ScamShield
Check a message

SCAM LIBRARY · 8 PATTERNS

Know the shapes before they reach you.

Scams vary enormously in story and almost not at all in structure. Learn the structure once and the story stops mattering.

8 of 8 scam patterns shown

  • WHAT IT LOOKS LIKE

    An SMS or email in your bank's name saying KYC is incomplete, your account will be blocked, or a transaction needs verifying — with a link to fix it immediately.

    A FICTIONAL EXAMPLE

    URGENT: Your account will be blocked today. Complete KYC at https://bank-verify.example

    RED FLAGS

    • A deadline of hours rather than weeks
    • A link sent to you instead of one you found yourself
    • A domain carrying the bank's name but not owned by the bank
    • Asks for full card details, password, or OTP on the page

    WHAT THE ATTACKER WANTS

    Your login credentials and the OTP that follows, so they can sign in as you.

    WHAT TO DO

    Open the bank's own app or type the address yourself. If KYC is genuinely pending it will show there. Call the number on your card, never one from the message.

    Test yourself

Banking

KYC and account-blocked warnings

Your bank appears to be about to freeze your account today.

WHAT IT LOOKS LIKE

An SMS or email in your bank's name saying KYC is incomplete, your account will be blocked, or a transaction needs verifying — with a link to fix it immediately.

A FICTIONAL EXAMPLE

URGENT: Your account will be blocked today. Complete KYC at https://bank-verify.example

RED FLAGS

  • A deadline of hours rather than weeks
  • A link sent to you instead of one you found yourself
  • A domain carrying the bank's name but not owned by the bank
  • Asks for full card details, password, or OTP on the page

WHAT THE ATTACKER WANTS

Your login credentials and the OTP that follows, so they can sign in as you.

WHAT TO DO

Open the bank's own app or type the address yourself. If KYC is genuinely pending it will show there. Call the number on your card, never one from the message.

Test yourself
ScamShield — stay skeptical, stay safe.

ScamShield reports risk based on the content you provide. It cannot verify who owns a domain or who sent a message, so a low score is not a guarantee that something is genuine. When money or account access is involved, check through a channel you found yourself.