A second look at a suspicious link, message, call or file. Private checks, clear explanations and a route to official help in India.
रुकें, जाँचें, फिर निर्णय लें। अनजान व्यक्ति को OTP, UPI PIN या पैसे न दें।
Independent guidance. Not a police service, antivirus or proof of authenticity. No account needed.
Where does this link really point?
We inspect the address without visiting it. We do not resolve redirects or download its content.
Check a threat database
Checking service availability…
Optional. Google Web Risk checks known phishing and malware listings, not whether a business or offer is legitimate. The query and fragment are removed to reduce exposure of tokens and personal details. Paths can still contain private information: review the exact address below.
Look for pressure, promises and payment traps.
Paste an SMS, WhatsApp message, email or the text of an offer. Local rules recognise some English and Hindi patterns. They can miss scams in any language and flag legitimate text.
A number cannot prove who is calling.
This checks formatting only. Use the official suspect repository for complaint-related records. A number absent from a repository may still be used for fraud.
External services. Enter the number there yourself; we do not send it or look up private caller identities.
Inspect the file. Verify the claim.
A photo, ID, job letter or profit screenshot can be misleading even when it looks convincing. This tool checks basic file type and creates a SHA-256 fingerprint locally. It does not detect deepfakes, scan for malware, validate digital signatures or authenticate documents.
The file stays in this tab. PDFs are not opened or executed. Nothing is uploaded.
A matching hash proves the bytes match the reference, not that the issuer or document is genuine. A screenshot or recompressed image will have a different hash.
Choose whether to provide a file on those external sites. Missing Content Credentials do not prove an image is fake; valid credentials do not prove the scene or claim is true. Confirm documents directly with their issuer.
Local inputs are not saved as history. Clear removes this tab’s inputs and results.
Can a result say something is definitely safe or fake?
No. Local rules are clues. Threat databases have incomplete coverage and delays. A “no match” result is not a recommendation to visit, pay, invest or share information. Phone numbers, images and documents need independent verification.
What is sent outside this device?
URL, message, phone and file checks run locally. Inputs are not written to local storage or added to URLs. Only an optional, explicit Google Web Risk lookup sends the displayed address to skyvison’s backend and Google. Ordinary site/server access logs may still record requests and IP addresses. External verification links open separately without your input attached.
Which APIs are connected?
Local checks work immediately. A server-side Google Web Risk adapter is included; it reports unavailable until the operator enables it with an API key. Web Risk offers a free allowance, with charges possible beyond it. Government portals here are manual official checks; we have not established public police/API Setu access for suspect identifiers. URLhaus requires authentication and commercial-use review; VirusTotal’s public API restricts commercial use. We do not label these services connected.