Got a message you don’t trust? Check it before you act.

Paste a link, a text, or a job offer and get a plain answer: safe, careful, or danger. Then learn the tricks so you can spot the next one yourself.

Example result

“Your parcel could not be delivered. Pay a $2.99 fee at sg-post-redeliver.xyz today.”

Danger2 red flags found

The 30-second test

Tick what is true about the message you got. Two ticks or more means stop.

Nothing ticked

Probably fine

Still, if something feels off, check it with the tools above.

Scams that look like this

Real-looking examples. Each red flag in the message is numbered and explained.

Grant or loan that needs a fee first

New in 2026Text or email

“Your startup is pre-qualified for a $250,000 grant. A 10% sponsor deposit is required before funds are released. Details at grants.gov.us-portal.org.”

  • You never applied. Real grants do not pick you at random.
  • Real money is never released after you pay someone first.
  • A real government site ends in .gov. This one belongs to whoever owns us-portal.org.

Do thisIgnore it. Look up the agency yourself and call the number on its own website.

Check a message like this

Fake delivery notice

Text message

“SingPost: your parcel could not be delivered. Pay a $2.99 redelivery fee at sg-post-redeliver.xyz within 48 hours or it will be returned.”

  • A small fee is how they get your card number.
  • The real company would use its own website, not .xyz.
  • A deadline is there to stop you thinking.

Do thisOpen the courier's official app and enter your tracking number there.

Check a message like this

Bank account locked

Text or email

“Your account has been temporarily locked. Verify your identity in 24 hours to avoid closure: dbs-secure-verify.top”

  • Banks do not lock accounts by text.
  • A threat plus a deadline is the classic pattern.
  • The link leads to a copy of the bank's login page.

Do thisCall the number on the back of your card. Never log in from a link in a message.

Check a message like this

Job that makes you pay to start

Jobs and money

“Earn $300 a day liking videos, no experience. To unlock your next tasks, top up 100 USDT. It is refunded with your commission.”

  • Too much pay for too little work.
  • Real jobs ask for skills, an interview, and a contract.
  • Working should never cost you money. The refund never comes.

Do thisStop replying. Do not top up. Report the account on the app where they found you.

Check a job offer

“Hi Mum” from a new number

Text message

“Hi mum, this is my new number, my phone fell in water. Can you transfer $850 for a bill today? Text me on WhatsApp.”

  • A new number with a broken-phone story is the usual opening.
  • The money ask comes fast and is urgent.
  • They want the chat moved somewhere you cannot easily verify.

Do thisCall your child on the old number, or ask a question only they could answer.

Check a message like this

Virus alarm with a phone number

Pop-up or call

“WARNING: 5 viruses found. Do not restart. Call Microsoft Support now on 1-888-555-0142.”

  • Websites cannot scan your computer. The alarm is fake.
  • Real security software never tells you to phone anyone.
  • The number reaches a scammer who asks for remote access.

Do thisClose the tab. If it will not close, restart the browser. Never call the number.

Check a message like this

A new friend who teaches you to invest

Chat message

“Hi dear, I feel a real connection with you and we only met last week. My uncle showed me a crypto trading platform that made me $12,000 this month. Just deposit $500 to start and I will guide you.”

  • Strong feelings, fast, from someone you have not met in person.
  • A sudden success story about money.
  • Paying in is the whole point. The profits on their screen are fake.

Do thisNever send money to someone you have not met. Ask for a live video call; scammers refuse.

Check a message like this

Guaranteed crypto returns

Investment

“Our algorithm guarantees 40% weekly returns. Early investors are already cashing out, spots close soon.”

  • No real investment can guarantee a profit.
  • The other investors and their winnings are made up.
  • The rush stops you checking. You would send money to a wallet you do not control.

Do thisDo not send crypto. Check the company on your financial regulator's warning list.

Check an investment offer

A prize you never entered

Text message

“Congratulations! You have been selected as the winner of an iPhone 16 Pro. Pay a small shipping fee of $4.95 at claim-your-prize-now.click within 12 hours.”

  • You cannot win a draw you did not enter.
  • Real prizes are never released after you pay a fee.
  • The address is made up for this one message.

Do thisDelete it. A real prize never asks you to pay.

Check a message like this

Unpaid toll or fine

Text message

“Final notice: unpaid road toll of $6.40. To avoid a $50 late fee and licence suspension, pay now at etoll-payments-us.com/pay”

  • A tiny amount for a bill you never received.
  • A threat that grows the longer you wait.
  • Toll and traffic offices use their own website or app, not a link in a text.

Do thisDo not click. Look up the toll operator yourself and check your account there.

Check a message like this

A buyer who overpays

Marketplace chat

“Hi, I want to buy your sofa. I sent $1,200 by mistake instead of $700. Please refund the extra $500 to my courier and keep the rest.”

  • The payment will bounce days later, after you have refunded.
  • You end up sending real money for fake money.
  • Sending it to a third party makes it harder to get back.

Do thisWait until the money has truly cleared in your account. Refund nothing before that.

Check a message like this

A refund or tax credit you did not expect

Text or email

“You are entitled to a tax rebate of $520. Confirm your bank details at iras-refund-portal.top to receive the payout.”

  • Real refunds are paid into an account they already have.
  • You are asked to type your bank details into a link.
  • The address is not the tax office's own.

Do thisDo not click. Log in to the tax office's site by typing its address yourself.

Check a message like this

If you already clicked or paid

It happens to careful people. Act in this order.

Right now

Stop the damage

  • Close the page. Do not reply or click anything else.
  • Do not send money, gift cards or codes, even if they scare you.
  • If money was sent, call your bank on the number on your card and ask to freeze it.
Within the hour

Lock your accounts

  • Change any password you typed, and any account that shares it.
  • Turn on two-step login.
  • Take a screenshot of the message and the page as proof.
This week

Tell someone and report it

  • Tell someone you trust. Asking for help is never wrong.
  • File a police report and tell the platform where it started.
  • Watch your statements for a month.

Dark web safety

Everything above works anywhere. DarkNyx lists .onion sites, and opening them carries extra risks. Read this before you go in.

  1. Use Tor BrowserIt hides who you are. Keep it up to date.
  2. Do not open filesA file from a stranger can hide a virus.
  3. Share no secretsNo real name, password, or card number. Ever.
  4. Red means stopSuspicious or Dangerous? Do not go in.
  5. Ask someone you trustFeeling unsure? Stop and ask.
Before you go in

Set up Tor safely

  • Get Tor Browser only from torproject.org. Copies from anywhere else can be tampered with.
  • Update it before each visit.
  • Open its shield icon and set the security level to Safer or Safest.
  • Leave the window at its default size, and do not log in to your own email or social accounts in it.
While you are in

Look, do not touch

  • Only read. Do not click download buttons, open files, or install anything.
  • Type nothing real: no name, email, phone number, password, or card number.
  • Check every address letter by letter. Copycat sites use addresses that look the same at a glance.
  • Copy addresses from a trusted list, such as the DarkNyx directory, not from a random post.
Never

Things that go wrong

  • Never buy illegal goods or services. It is a crime in most places, and buyers are often robbed by exit scams.
  • Never pay a deposit, unlock fee, or escrow to a stranger.
  • Never reuse a password or email address from your normal life.
  • Never chat with strangers or share photos or personal details.
Real sitemkt7w3qe5vd2…x4dk.onion
Copycatmkt7w3ge5vd2…x4dk.onion
Spot the copy. One character is different. A copycat can look identical and still send your money or your login to someone else. Example addresses only.

Fake and copycat sites. Anyone can make a site that copies a real one and swaps in their own payment address or login box. If a page asks you to sign in, pay, or download, treat it as fake until you have checked the address from a source you trust.

Illegal content involving children. If you ever see it, close the page straight away. Do not save it, share it, or go looking for more. Report it to your country's hotline (find yours at inhope.org) or to the police.

A listing on DarkNyx is not an endorsement or a safety guarantee. Many of these sites host illegal goods, stolen data or malware. What you open is your own responsibility under the law where you live.

What the site colours mean

Every site gets a colour. A computer picks it, and computers can be wrong, so use it as a helper and not as the last word.

Verified

A real, proven service that has been checked and confirmed genuine.

Safer to visit

Unrated

Nothing bad found yet. That is not the same as safe.

Be careful

Suspicious

Might sell illegal things, or might run away with your money.

Stay away

Dangerous

Signs of real harm: stolen data, fraud, or a fake copy of the real site.

Do not go in
What is the dark web, and what does Tor do?

The normal internet is like a city with street signs. The dark web is a set of hidden doors. A special key called Tor opens them. Tor sends your visit through three helper computers, so nobody can easily see where you came from.

You Helper 1 Helper 2 Helper 3 Hidden site Each helper only knows the one before it and the one after it. Your connection is wrapped in 3 layers of encryption, like an onion.

←  Swipe to see all 3 relays  →

Tor is not bad. Reporters and people in strict countries use it to stay private.

Some sites are bad. Some sell stolen things or try to trick you. Nobody is there to help you afterwards.

Words you will see

Tor

A free tool that hides where you are when you go online.

Onion address

A web address that ends in .onion. It only works in Tor Browser.

Scam

A trick used to steal your money or your personal secrets.

Phishing

A fake page or message that pretends to be someone you trust.

Malware

A bad program, like a virus, that can hurt your computer.

Leak

Private information that was stolen from a company and then shared.

VPN

A tool that hides your internet connection from your internet provider.

Ransomware

Malware that locks your files and demands money to unlock them.

Not sure about something? Check it now.

Open the free tools