LEGITTAP

USE LEGITTAP RIGHT HERE

Think it might be a scam? Check it here.

Choose what you have. LEGITTAP can check a suspicious message, phone number, link, or screenshot right on this website.

No app required. Use LEGITTAP in your browser. Your checks use the same protected LEGITTAP system as the mobile app.

CHECK IT NOW

What do you want LEGITTAP to check?

Use LEGITTAP right here. Choose Message, Phone, Link, or Screenshot below. Sign in with your LEGITTAP account to run the check and save it to the same history as the app.

Sign in to scan Use your LEGITTAP email and password, or create an account here.

Up to 20,000 characters. History keeps a privacy-safe preview instead of the full message.

SAME ACCOUNT, SAME HISTORY

Recent checks

FOUR WAYS TO CHECK

Put the suspicious thing in front of LEGITTAP.

Each check explains what evidence was found, what remains uncertain, and what a safer next step looks like.

SCAM CHECKER GUIDES

Search the kind of scam clue you have.

Use focused guides for suspicious messages, phone numbers, links, screenshots, and job offers, plus a plain-language fraud glossary.

Online scam checkerHow LEGITTAP combines message, phone, link, and screenshot evidence. Text message scam checkerCheck suspicious texts, emails, account alerts, and payment requests. Phone scam checkerReview number clues without treating caller ID as identity proof. Suspicious link checkerInspect URL, domain, redirect, reputation, and threat-intelligence clues. Screenshot scam checkerAnalyze visible scam and impersonation clues in an image. Job scam checkerCheck recruiter messages, fake checks, and reshipping job offers. Scam and fraud glossaryUnderstand phishing, smishing, spoofing, reshipping, social engineering, and more.

VERIFIED INTELLIGENCE

Latest scam alerts LEGITTAP is watching

Recent high-confidence developments from authoritative and established security sources. Use these as warning signals, then verify independently before acting.

SEP 22, 2026EMAIL · WEB · ATTACHMENTS · TELEGRAM

EvilTokens phishing targets Microsoft 365 sessions

Cloudflare reported a coordinated disruption of EvilTokens, a phishing-as-a-service platform used to steal Microsoft 365 authentication tokens, bypass MFA protections, compromise inboxes, and facilitate business email compromise.

Watch for
  • Unexpected Microsoft 365 sign-in links or attachments
  • Credential pages reached from unsolicited messages
  • Rapidly configured phishing domains or hosted worker logic

Verify: Navigate to Microsoft 365 directly, not through the message, and review account sign-in/session activity after suspected exposure.

Source: Cloudflare Threat Intelligence →
SEP 17, 2026PHONE · TEXT · EMAIL

Government and law-enforcement impersonation schemes

The FBI warned of schemes impersonating U.S. and foreign law-enforcement or government officials to pressure victims for money or personal information.

Watch for
  • Unsolicited contact claiming to be an official
  • Spoofed agency phone numbers or email addresses
  • Real employee names used as supposed proof
  • Pressure to provide money or personal information

Verify: End the contact and independently locate the agency's official website or published phone number.

Source: FBI IC3 →
SEP 9, 2026PHONE · TEXT · PRIZE LURES

Prize offers tied to Social Security direct deposit

SSA OIG warned about scammers claiming a victim won a prize and instructing them to redirect Social Security direct deposit, sometimes to a prepaid debit account, while collecting personal or banking information.

Watch for
  • A prize requiring a direct-deposit change
  • Requests for Social Security or banking information
  • Requests to route benefits to a prepaid debit card

Verify: Review direct-deposit settings through the official my Social Security account and contact SSA using its published contact information.

Source: SSA OIG →
SEP 3, 2026EMAIL

Invisible Unicode used to evade phishing filters

Microsoft observed a high-volume phishing campaign using invisible Unicode tag characters inside financial lure words so visible text appeared normal while the machine-readable content differed.

Watch for
  • Financial requests that arrive unexpectedly
  • Messages that look normal but trigger other trust concerns
  • Content designed to evade a single email-filter signature

Verify: Confirm financial requests through an independent known channel and use layered email security rather than trusting visible text alone.

Source: Microsoft Security →

These alerts are decision-support information, not a guarantee that any particular message, caller, website, or account is legitimate or fraudulent.

ALREADY CLICKED, PAID, OR SHARED SOMETHING?

LEGITTAP can help you start cleaning it up.

Pick what happened. Start with the urgent steps, then use official recovery and reporting resources. Do not pay anyone who contacts you promising to recover lost money for an upfront fee.

$I sent moneyCard, bank transfer, payment app, wire, gift card, or crypto
  1. Contact the bank, card issuer, payment app, wire company, gift-card issuer, or crypto provider immediately.
  2. Tell them the payment was caused by fraud and ask whether it can be stopped, reversed, disputed, or refunded.
  3. Save receipts, transaction IDs, messages, phone numbers, and screenshots.
FTC recovery steps →
🔑I shared a password or security codeEmail, banking, social media, or another account
  1. Change the compromised password from a device you trust.
  2. Sign out other sessions or devices if the account offers that option.
  3. Turn on two-factor authentication and change the password anywhere else you reused it.
FTC account-recovery guidance →
IDI shared personal informationSSN, identity documents, account numbers, or other sensitive data
  1. Document exactly what information was exposed.
  2. Use IdentityTheft.gov to build a recovery plan for your situation.
  3. Watch affected financial and online accounts closely for unauthorized activity.
Start at IdentityTheft.gov →
⚠I gave access to my phone or computerRemote-control app, screen sharing, software install, or unknown file
  1. End the remote session and disconnect the affected device from the network if someone may still have access.
  2. Remove remote-access software you did not intend to keep and run a trusted security scan.
  3. From a clean device, change passwords for important accounts that may have been exposed.
FTC device-access guidance →

OFFICIAL HELP

Report it and create a recovery trail.

These are government resources, not paid recovery companies.

Report to the FTC Identity theft recovery FBI IC3

HOW IT WORKS

A verification chain, not a magic green light.

1

Submit the clue

Message, number, link, or image. LEGITTAP starts with the evidence you actually have.

2

See why it was flagged

Results separate risk signals, reassuring indicators, uncertainty, confidence, and recommended actions.

3

Take the next best check

Verify the sender, compare an official domain, or review history instead of treating one signal as the whole answer.

BUILT AROUND CAUTION

Useful confidence without fake certainty.

✓An “unable to verify” result does not get a fake 0/100 risk score.
✓A threat-list miss is not presented as proof that a website is safe.
✓A valid phone format is not presented as proof of who owns or controls the number.
✓Results show uncertainty and give an independent verification step.
LEGITTAP is designed to help you decide what deserves verification. It does not make legal findings, verify identities, or replace professional advice.
PHONE CHECK RESULT
Unable to verify

The number can have a valid format while the caller’s identity remains unproven. Caller ID can also be spoofed.

RISK SCORENot assigned
NEXT STEPCompare official contact

PRIVACY BY DESIGN

History is useful without becoming a vault of raw suspicious content.

Text history uses a privacy-safe preview. URL history retains the hostname rather than the full submitted URL. Phone history is designed to retain only a masked preview ending in the last four digits. Successful image analysis removes raw uploaded evidence.

Read the full privacy policy

QUESTIONS

Clear boundaries make a better safety tool.

Does low risk prove something is legitimate?

No. LEGITTAP evaluates the evidence available to the scan. A low-risk result is not identity verification or a guarantee.

Can LEGITTAP tell me who owns a phone number?

Not in the current beta. The phone check evaluates supported structural clues and tells you what still requires independent verification.

Does LEGITTAP open suspicious links?

The current URL design analyzes the submitted URL and configured threat intelligence without using the backend to fetch arbitrary submitted webpage content.

What happens to screenshots?

Raw screenshot/image evidence is stored privately for analysis and is designed to be deleted after successful analysis. Abandoned uploads expire and are cleaned on a schedule.

PRIVATE BETA

LEGITTAP is being tested on real devices now.

The current beta is focused on reliable scans, privacy-safe history, native sharing, accessibility, and clear decision support before wider release.

Beta support