r/CyberAdvice

I built a small AI tool that checks if a text or email is a scam
▲ 4 r/CyberAdvice+4 crossposts

I built a small AI tool that checks if a text or email is a scam

Reason I built this: family group chats keep getting the same kind of message. "Is this real?" with a screenshot of some sketchy text. Fake USPS fee, IRS arrest threat, "wrong number" that pivots to a crypto pitch a few replies later. Same thing every week.

The people getting these are usually the ones least equipped to spot them, and the kids/grandkids they ping aren't always around in time.

So, small open-source web app for it. Paste the message or upload a screenshot, get a green/yellow/red verdict in plain English. Built so someone in their 70s can use it, not security people.

A few things worth mentioning. It's fully client-side, no backend, no telemetry. The message goes from your browser straight to Anthropic. There isn't a server I could peek at if I wanted to.

It's BYOK, so you plug in your own Anthropic API key (free to start). About a tenth of a cent per scan. I'm never monetizing this.

The scam pattern library is just JSON files in /scam-patterns/. If you've seen something in the wild that's not covered, PR a new file and everyone's version gets better. No retraining.

Built over a weekend with Claude Code after writing a proper spec. Stack is Vite, React, TypeScript, Tailwind. MIT.

Repo: https://github.com/srivatp2-code/scam-shield

Being honest about the limits, Claude can be wrong on both sides. It'll occasionally call a legit message suspicious, and it'll miss novel scams. It's a second opinion, not gospel. Always confirm with the real sender through a channel you trust.

What scam types am I missing in the starter library? Genuinely interested in adding the ones people have seen recently.

u/fhard007 — 2 days ago
▲ 168 r/CyberAdvice+3 crossposts

Is my bf using this to track me?

Bf got upset I was on IG at 4 am (insomnia from meds im taking for inflammatory disease), sent me a pic of this w my phone number written above and said “keep playing, busted”. Im not familiar w the device. Is he using it to track or hack me potentially? Haven’t even done anything literally sitting at home sick… thanks in advance.

u/Coalabare — 5 days ago
▲ 21 r/CyberAdvice+17 crossposts

New Academic Research: “Zombies in Alternate Realities: The Afterlife of Domain Names in DNS Integrations”

Interesting paper on a fairly under-discussed issue in DNS: what happens to expired or repurposed domain names that remain embedded in DNS dependencies across systems. The core finding is that these “orphaned” or changed domains can persist in resolution paths and integrations long after their original context is gone, creating real security and reliability implications.

My take: this becomes even more relevant in modern AI systems, where agents, tools, plugins, and third-party APIs are rapidly stitched together. In that environment, domain names and DNS-level dependencies can quietly extend the AI supply chain attack surface in ways that are easy to overlook.

Paper: https://arxiv.org/abs/2605.06880

reddit.com
u/VincentADAngelo — 5 days ago
▲ 1 r/CyberAdvice+1 crossposts

Cybersecurity

I’m currently in AFROTC and I’m attempting to get a degree in cybersecurity. But I’ve been criticized over the fact that ai may take over the field and make my selection process if not harder. I still have a chance to maybe change to finance or accounting and become finance management officer or something of sorts. This is all with the idea of plan B btw incase I don’t make it into field training selection.

reddit.com
u/Fuzzy-Remove225 — 7 days ago
▲ 8 r/CyberAdvice+2 crossposts

Cybercrime victim

I recently became a victim of a cyber fraud impersonation scam and wanted to share this as a caution for others.

On 12 May, I received an email and subsequent WhatsApp messages from someone impersonating my Managing Director using her name and profile picture. The individual claimed there was an urgent work-related requirement and pressured me into purchasing digital gift cards, assuring me that the amount would be reimbursed immediately.

Believing the request to be genuine due to the professional context and urgency created, I ended up losing ₹1,24,000 across two transactions.

A formal cybercrime complaint has already been filed along with all supporting evidence, screenshots, transaction details, timestamps, and payment records.

The purchases were made through Amazon gift cards, so I wanted to ask — if anybody here works in cybercrime, fintech/fraud investigation, banking, Amazon, or related areas, is there anything that can still be done in such cases? Any guidance or help would genuinely mean a lot.

Please verify through direct calls or official channels before making any payment or purchase request, even if it appears to come from someone senior within your organisation. These scams are becoming extremely sophisticated and convincing.

reddit.com
u/deluluingoverwifi — 9 days ago

Ex hacked my Snapchat years ago, now resurfaced with my photos ….what can I do?

Hi everyone,
I’m in a really stressful situation and need advice. Around 5 years ago, my ex hacked into my Snapchat account. He changed both the password and the recovery email, so I lost access completely. After that, we broke off contact and nothing happened for years.

Yesterday, I suddenly got a request from that same hacked ID, and he sent me my photos. I immediately raised this concern with Snapchat support, but they told me that since the email was changed, they can’t help me recover the account.

I even called cyber security, but instead of helping, the person just moral-policed me, saying not to keep personal things on social media apps.

Now I’m worried — so far no personal photos have been shared, but this could become a serious threat. What steps can I take now? Is there a way to escalate this legally, or to get Snapchat to take action despite the email change?

Any guidance or shared experiences would mean a lot.

reddit.com
u/Pretty_Chocolate_627 — 8 days ago