🔗 Link & URL Checkers
Before clicking any suspicious link — check it here first. These tools analyse URLs for phishing, malware, and scam indicators.
VirusTotal
Paste any URL or upload a file — VirusTotal scans it against 70+ antivirus engines and threat intelligence feeds. The gold standard for link verification. Free · virustotal.com
Google Safe Browsing
Google's own tool — checks if a site is flagged as dangerous, deceptive, or hosting malware. Fast and reliable for Indian banking/government phishing sites. Free · Google
URLScan.io
Scans a URL by visiting it in a sandbox, takes a screenshot, and shows all network connections — useful to see what a link really does without clicking it. Free · urlscan.io
CheckPhish
AI-powered phishing URL detector. Great at spotting typosquatted domains that mimic Indian banks (e.g. "sbionline.co" vs "sbi.co.in"). Free · checkphish.ai
📞 Phone Number Verification
Before calling back an unknown number or accepting a job/offer from a WhatsApp contact — verify who they are.
Truecaller
India's most-used caller ID and spam blocking app. Search any mobile number to see if it's registered as a scam, telemarketer, or business. Over 350 million users contribute spam reports. Free app & website · truecaller.com
Sanchar Saathi — Know Your Mobile
Check how many SIM cards are registered against your Aadhaar. If you didn't register a number but it shows up — someone is using your identity. Report and block immediately. Free · Government of India
🔑 Data Breach Checkers
Check if your email or password has appeared in known data breaches — so you can change your passwords before a scammer uses them.
Have I Been Pwned?
Enter your email address to see if it has appeared in any of 750+ known data breaches (including Paytm, BigBasket, JusPay and other Indian services). Trusted by security professionals worldwide. Free · haveibeenpwned.com
Firefox Monitor
Mozilla's breach monitoring tool powered by Have I Been Pwned. Alerts you when your email appears in new breaches. Set up alerts to get notified automatically. Free · Mozilla
🌎 Domain & Company Verification
Verify if a company website, job offer domain, or government-looking site is real and how old it is.
ICANN WHOIS Lookup
Check who owns a domain and when it was registered. If a "company" website domain is less than 90 days old — it's almost certainly fake. Scammers set up fresh domains for every campaign. Free · ICANN
MCA Company Search
Ministry of Corporate Affairs database — search any company name to confirm it is legally registered in India, its CIN number, and its registered address. Essential before accepting any job offer or making a payment to a business. Free · Government of India · mca.gov.in
WHOIS.com
Alternative WHOIS tool with a cleaner interface. Shows domain registration date, registrar, and contact details. Especially useful for checking .in domains and fake Indian company websites. Free · whois.com
📷 Image & Identity Verification
Scammers use stolen profile photos. Reverse image search reveals if a "person" you met online is actually a fake identity.
Google Reverse Image Search
Drag or paste any profile photo to see where else it appears online. Scam profiles almost always use stolen model or celebrity photos. Free · Google Images · images.google.com
TinEye
Reverse image search engine specialised in finding exact and modified copies of images. Shows where a photo was first published and all sites using it — great for exposing romance scam profiles. Free · tineye.com
🔐 Password & Account Security
Bitwarden — Password Manager
Free, open-source password manager. Generates strong unique passwords for every account — so one breach doesn't compromise everything. Bitwarden's free tier is fully functional. Free · bitwarden.com
Google Account Security Checkup
Review all devices logged into your Google account, third-party apps with access, and recent security activity. Run this if you suspect your Gmail or Google account is compromised. Free · Google