IsThisSpam - Scam & Spam Detector

Your All-in-One Safety Toolkit. Detects spam, scams & fake stores in emails & websites. Privacy-first by default.

Check suspicious emails, links, and websites before you act. IsThisSpam is a browser protection extension that helps you spot phishing, scams, spam, impersonation, and other risk signals - then explains what it found in plain language. EMAIL PROTECTION • Check messages in Gmail, Outlook, and Yahoo. • Analyze an opened message automatically or run a deliberate check. • Look for phishing, fake invoices, impersonation, suspicious senders, urgent requests, deceptive wording, risky links, and unusual attachments. LINK AND TEXT CHECKS • Right-click a link to check it without opening it. • Select suspicious message text and send it for analysis. • Check supported social and profile links when you need a second opinion. BROWSING PROTECTION • Turn on optional browsing protection to check website addresses as pages load. • Get an on-page warning when a website matches configured risk settings. • Use the floating check button to run a manual page check while you browse. • Manage trusted sites and browsing access from the Protection Center. CLEAR RESULTS • See risk categories, supporting signals, explanations, and practical next steps. • Review recent email and website checks in the Protection Center. • Keep check history stored locally in your Chrome profile. FREE TO START • Begin with no account required. • Get 10 combined email and website checks per local day. • After the allowance is used, anonymous users can create an account or sign in to continue; free accounts can upgrade for unlimited protection. • Eligible Personal, Business, Apple-linked, and StackSocial access can unlock premium extension protection. PRIVACY AND CONTROL • Inbox checks work separately from optional all-site browsing access. • Website access is requested only when you enable browsing protection. • Choose IsThisSpam Servers, supported cloud providers, or local Ollama/LM Studio providers in Settings. • Checked content is sent only to the provider you select when a check runs. Local providers process content through the local server you configure. Automated results are advisory, not guarantees. Always verify unexpected requests through a trusted contact before sharing credentials, sending money, or opening an attachment.