Free scam checker for Australians
Not sure about a message? Take a second look.
Paste a text, email, social media message or link, or upload a screenshot. Second Look shows the warning signs in plain words and tells you exactly what to do next.
Made for everyone, especially parents and grandparents. No account, no cost.
- Never opens the links you paste
- Checks run on your device
- Works without AI
Step 1
What did you get?
Pick what you want to check. Not sure? Start with Message and paste whatever you received.
Check a screenshot
Take a screenshot of the message, then add it here. Second Look reads the words on your device and checks them.
The picture stays on your device. The first time, your browser downloads the free text reader (about 7 MB, from jsDelivr). The picture is only sent anywhere if you choose the AI option.
Check a QR code before you scan it
Scammers stick fake QR codes over real ones on parking meters, posters and letters. This is called ‘quishing’. Second Look reads the code and shows where it goes, without opening it.
Your result will appear here
You'll see a verdict, the warning signs highlighted in the message, and clear steps for what to do next. There are three possible verdicts:
- Likely scamStrong warning signs. Don't reply, pay or tap anything.
- Be carefulSome warning signs. Check another way first.
- No common warning signs foundNot a guarantee. Stay careful.
Practise
Spot the scam
Eight made-up messages based on common Australian scams. Tap the parts you think are warning signs, then decide: scam or fine?
Protect my family
Warn the people you love
Send a short heads-up about a scam that's going around, and share the five golden rules.
Family alert
Preview
5 golden rules for scam messages
Report scams at scamwatch.gov.au. Identity help: idcare.org. If you've lost money, call your bank straight away.
On this device
Your past checks
No checks yet. When you check something, it's listed here so you can look at it again. Only this browser can see it.
How it works
Three steps, about a minute
-
1
Paste or upload it
Paste the text, a link or email headers, or add a screenshot or QR code photo.
-
2
See the warning signs
Get a verdict, with each warning sign highlighted and explained in plain words.
-
3
Know what to do
Follow clear next steps, including what to do if you've already clicked, paid or shared details.
Watch it work (40 seconds, no sound)
A phone screenshot of a fake toll text is read, checked and highlighted, its shortened link is followed to the real destination, and the next steps appear.
The video uses the built-in examples. Captions are on by default.
Trust
Your privacy
What stays on your device
- Message, link, email header and phone checks run inside this page, on your device.
- Screenshots and QR photos are read on your device. They aren't saved, and they're only sent anywhere if you choose the AI option.
- Your past checks, text size and quiz score are saved in this browser's storage only (localStorage). Turn history off or clear it any time.
- No account, no ads, no tracking or analytics.
- What you paste or upload is never sent to the font or library services below.
What leaves your device
- Deep link check: the link is sent to this site's server, which follows its redirects without showing the page, and asks the public domain registry (RDAP) how old the website is. The scammer's website may see a visit from our server, never from you.
- AI help: the message text as shown (with any details you hid still hidden) and the list of warning signs are sent to the AI service that runs this site. With the screenshot option, the picture is sent too.
- Fonts and tools from other services: the page's fonts load from Google Fonts each time you open it. The screenshot reader and QR reader load from jsDelivr, and the PDF maker from cdnjs (Cloudflare), the first time you use them. Like any website visit, these services see your internet address and that this page asked for the file, but none of your messages, pictures or results.
- Nothing else is sent anywhere.
Questions
Common questions
Can Second Look tell me a message is safe?
No. It can find warning signs, but it can't prove a message is real. Some scams copy real messages word for word. That's why the best result you'll see is ‘No common warning signs found’. If a message asks you to pay, sign in or act fast, check with the organisation directly first.
Does it open the link I paste?
Your browser never opens it. The quick check only reads the address. If you choose the deep check, this site's server looks up where the link redirects without showing the page, and you never visit it.
I've already paid or given my details. What now?
Call your bank straight away on the number on the back of your card. Then report it at ReportCyber (cyber.gov.au). If you gave identity details like your licence or Medicare number, contact IDCARE (idcare.org), a free identity support service. In the results, tap what happened to get the full steps.
Why did a real message get a warning?
Real companies sometimes use the same words scammers do, like ‘urgent’ or ‘verify’. A warning means ‘check this another way’. It isn't an accusation. Contact the organisation using a number or website you find yourself.
How do I check whether it's really my bank or the ATO?
Don't use anything in the message. For your bank, call the number on the back of your card or use your banking app. For the ATO, myGov or Centrelink, type my.gov.au yourself or use the official myGov app. Real Australian government websites end in .gov.au.
Where do I report a scam?
Report scams to Scamwatch (scamwatch.gov.au), run by the National Anti-Scam Centre. If you lost money or were hacked, also report to ReportCyber (cyber.gov.au). If you're with Telstra, you can forward a scam text to 7226.
Who made this, and is it official?
Second Look was built by Lazar in Perth. It's a free independent tool. It isn't run by, or connected to, Scamwatch, any bank, telco or government agency.